Cyberattack disrupts refrigeration at hundreds of French supermarkets, causing food losses and reported fires
Event summary
French prosecutors and retailers confirm an October 11–12 attack on connected supermarket refrigeration. Intermarché reports about 150 affected stores; authorities cite food spoilage and reported fires. The perpetrators and any link to Dutch incidents remain unverified.
CHRONOS Wire · October 12 · Alert 12
Publication details
- Published
- Updated
- Revision
- r497727
- Source
- Reuters
Cliff Notes
- A cyberattack disrupted supermarket refrigeration across France, damaging fresh and frozen food and prompting a national investigation.
- About 150 Intermarché locations were confirmed affected; other chains also reported disruption. Attribution and cross-border linkage are unconfirmed.
U.S. Impact
No material U.S. impact identified · Confidence: High.
Why
Observed material consequences are in France. The U.S. has no confirmed direct effect. Nonzero potential reflects plausible but unverified equipment exposure, not an assumed U.S. incident.
Overnight October 11–12, malicious remote manipulation of connected refrigeration equipment caused damaging temperature changes at multiple French supermarket chains. Les Mousquetaires said roughly 150 Intermarché stores were affected and food was discarded. Cooperative U confirmed impact; Paris prosecutors opened an investigation into a large-scale attack and reported fires. Danfoss acknowledged incidents involving older refrigeration-management firmware. Separately, Ahold Delhaize disclosed a security issue in the Netherlands and Belgium; investigators have not established that it is related.
ELI5: Plain-English Explanation
Hackers interfered with computer-controlled supermarket fridges, making some warm up instead of stay cold. Stores had to throw away food, and authorities reported some fires.
Why This Is Urgent
Cyber-physical sabotage has moved beyond stolen data to food preservation, property damage and potential supply-chain disruption. Operators of similar equipment may face immediate exposure.
What Changed
The October 11–12 operational disruption was confirmed October 12 by the Paris prosecutor's office and affected supermarket chains. Reuters published at 13:57 UTC; AFP reported at 13:51 UTC.
What Is Genuinely New
Verified real-world multi-chain exploitation of connected refrigeration with food loss and reported fires, rather than an older laboratory vulnerability disclosure or a generic retail data breach.
CHRONOS Bottom Line
Confirmed cyber-physical harm across French food retailers warrants attention, but neither attackers nor total financial losses nor a Dutch connection have been established.
Market Reality Gap
No verified total euro loss, nationwide food shortage, attribution to a state actor, or demonstrated systemic compromise of all Danfoss devices. The reported Dutch outage is not proven linked.
Negative Evidence / Invalidation
- No independently verified perpetrator or motive.
- No evidence of national food-supply collapse.
- Dutch retailer security incident not linked by investigators.
- Exact exploit chain and firmware exposure are unconfirmed.
Resilience / Shock Absorbers
Stores can discard compromised goods, isolate controllers, restore refrigeration, deploy technicians and replace inventory. Vendor patches and segmentation may contain additional exposure, subject to site-specific assessment.
Watch Windows
- Next 6–24h: prosecutor, ANSSI and retailer incident updates.
- Next 24–72h: vendor technical advisories and validated impact counts.
- Next 1–2 weeks: independent forensic findings and any cross-border link.
Uncertainties / Known Unknowns
- Total number of affected locations and food losses.
- Fire damage and injury counts.
- Attackers and exploit mechanism.
- Whether Dutch and Belgian disruptions are connected.
Detailed Analysis
The incident affects operational technology that regulates cold-chain equipment. Affected stores report food disposal after refrigeration temperatures were altered; prosecutors confirm an investigation and reported fires. The attack creates immediate food-waste, operational and safety costs. Danfoss stated affected units used outdated firmware, but the precise exploit chain and whether known published vulnerabilities were used have not been established. Dutch retailer Ahold Delhaize simultaneously reported a security issue; no causal connection is proven. Monitor manufacturer advisories, independent incident forensics and verified cross-border incidents.
Affected Countries
- France
- Netherlands
- Belgium
- Denmark
Affected Industries
- Food retail
- Commercial refrigeration
- Cybersecurity
- Cold-chain logistics
- Insurance
Affected Companies
- Les Mousquetaires
- Intermarché
- Coopérative U
- Danfoss
- Ahold Delhaize
Affected Assets
- Commercial refrigeration controllers
- Fresh and frozen food inventories
- Retail cold-chain infrastructure
Sources / Evidence
- 01
- 02
- 03Numerama: Refrigeration-control attack affects French supermarketsNumerama2026-10-12
Follow CHRONOS ALERTS
Published alerts also appear on Instagram and Threads as @chronosalerts.