French supermarkets suffer refrigerator shutdown after 'unprecedented' cyberattack

FRANCE, 13 OCTOBER 2026 —

French Supermarket Cyberattack Forces Mass Food Waste as Refrigeration Systems Fail Across Hundreds of Stores

The attack, which authorities described as exploiting outdated software in legacy refrigeration equipment, triggered forced defrosting cycles in targeted stores, forcing retailers to discard perishable goods and prompting a rapid response from French cybersecurity agencies. The incident underscores vulnerabilities in critical infrastructure across Europe, with officials warning of potential broader impacts as investigations continue.

The scale of the disruption became clear through separate statements from the affected retailers. Intermarche and its Netto brand reported that at least 300 stores were impacted, while Cooperative U said over 100 of its outlets were affected. E. Leclerc confirmed the attack targeted its refrigeration systems, though it did not disclose the exact number of stores.

Unconfirmed reports from specialist retail news site jebosseengrandedistribution.fr suggested Carrefour Market and Monoprix were also affected, though those companies have not yet publicly acknowledged the incident.

The cyberattack was traced to a vulnerability in refrigeration control systems supplied by Danish manufacturer Danfoss, which confirmed the affected equipment included its AK-SM800 and AK-SC355 fridge regulator models. Danfoss noted that the compromised systems used outdated firmware, with the AK-SM800 reportedly running "legacy" software that no longer receives security updates. The company had previously advised retailers to upgrade from these models but did not provide details on how many systems were affected globally.

French authorities moved swiftly to contain the threat. A source close to Prime Minister Sébastien Lecornu stated that France’s cybersecurity agency had already identified the software vulnerability and contacted Danfoss for mitigation. The agency is coordinating with European counterparts to assess potential risks to other countries and is identifying additional French companies that may have been exposed.

"It is liaising with its European counterparts, as other countries may be affected," the source said, emphasizing the need to prevent further spread.

The attack’s implications extend beyond France’s borders. European Union Food and Agriculture Commissioner Christophe Hansen condemned the incident on X, warning that such "exploitation of food systems" had become a growing reality. "Food security requires more attention at all levels," Hansen stated, highlighting the broader implications for supply chain stability across the EU. Paris prosecutors confirmed the attack had also sparked fires in some stores, though no injuries or major structural damage were reported.

For the affected retailers, the operational fallout is immediate. Intermarche stated that all fresh and frozen products in compromised stores would need to be discarded, leading to significant financial losses. Cooperative U’s CEO, Dominique Schelcher, described the attack as "unprecedented," signaling the severity of the disruption.

While Danfoss has not yet disclosed the full extent of the damage, the incident has reignited debates over the need for stricter cybersecurity protocols in critical infrastructure, particularly in sectors reliant on aging technology.

The situation remains fluid as authorities work to contain the breach and assess its full scope. With no further details yet available on the hackers’ identity or motives, the focus remains on damage control—both for the retailers and the broader food supply chain. The incident serves as a stark reminder of the vulnerabilities inherent in interconnected systems, particularly as cyber threats continue to evolve.

Related: Danfoss · Sébastien Lecornu · France