Ethan Carter
A group of unidentified hackers has infiltrated numerous supermarkets throughout France, remotely adjusting refrigerator and freezer thermostats to a scorching 122 degrees Fahrenheit (50 degrees Celsius). This malicious act has resulted in significant food spoilage, as revealed by French authorities to Reuters. Paris prosecutors have characterized this incident as a “large-scale” cyber attack.
The precise ramifications of the breach remain uncertain; however, reports indicate that both food waste and potential fires have occurred as a consequence. Thierry Cotillard, CEO of Intermarche, informed BFM TV that the financial losses could amount to tens of millions of euros, as per Reuters. A representative from Prime Minister Sebastien Lecornu’s office disclosed to Reuters that France’s National Cybersecurity Agency (ANSSI) is currently investigating the matter and has identified indications that the attack stemmed from a vulnerability within Danish engineering company Danfoss.
Danfoss acknowledged the situation in a statement to Reuters, noting that they are “aware of incidents in France affecting a limited number of refrigeration management systems.” According to Reuters, confirmed targets of the attack include Les Mousquetaires, the owner of Intermarche (150 stores), Carrefour (80 stores), Monoprix (approximately 5% of its 490 French stores, or around 25), and Cooperative U (exact number unclear). Felix Aime, a senior cyber intelligence threat analyst at Sekoia Threat Detection and Research, indicated that other organizations in Spain, Portugal, Poland, Germany, and Belgium also appeared to be affected.
Attacks on the retail sector are increasingly common. For example, a cyber attack on UK retailer Marks & Spencer last year led to store closures and resulted in £324 million ($428 million at current exchange rates) in lost sales. This incident was merely the beginning of a wave of attacks that eventually impacted brands like Harrod’s.
Operational technology (OT) systems that become connected to the internet often lack adequate security measures. Disabling critical equipment to induce costly downtime is a tactic frequently employed by ransomware groups and other cybercriminals. In this situation, however, Danfoss has attributed the breach to “outdated firmware.”
Reports from Food Navigator indicate a troubling trend: cyber attacks on the food and beverage sectors are on the rise. the ability of threat actors to compel organizations to cease operations is improving, with the percentage of ransomware victims forced to shut down rising from 45% in 2021 to 58% in 2025, according to data from Infor cited by Food Navigator.
Dominique Schelcher, CEO of Coopérative U, emphasized the severity of the situation, stating, “Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is of extreme gravity and is unprecedented.”
Daniel Mercer
Brandon Fletcher
