French supermarkets suffer fridge shutdown after 'unprecedented' cyberattack

If you buy groceries, the cost of fresh and frozen food will increase due to widespread spoilage and potential supply chain disruptions.

Major French supermarket chains, including E. Leclerc, Intermarche, and Cooperative U, experienced a significant cyberattack that caused refrigerators across hundreds of stores to malfunction. The attack, described as "unprecedented" by Cooperative U's CEO, remotely triggered the forced defrosting of refrigeration systems, leading to the spoilage and disposal of fresh and frozen food. At least 300 Intermarche and Netto stores, over 100 Cooperative U outlets, and several E. Leclerc locations were affected. Paris prosecutors confirmed the attack, which reportedly also caused fires, and have opened an investigation into the large-scale incident. E. Leclerc indicated that a supplier of its refrigeration equipment was targeted, with sources suggesting Danish manufacturer Danfoss's "legacy" systems, which no longer receive security updates, were compromised. French authorities are collaborating with European counterparts to identify other potential victims and prevent further spread.

This cyberattack highlights a critical vulnerability in the supply chain, specifically targeting operational technology (OT) in critical infrastructure like food retail. The exploitation of "legacy" refrigeration systems that lack current security updates by a single vendor demonstrates how a concentrated point of failure can have cascading effects across multiple large organizations. The incident underscores the growing threat of hybrid attacks, where cyber warfare tactics are extended to disrupt essential services and create widespread panic, moving beyond traditional data theft or ransomware.

The attack signals a concerning trend where cybercriminals are weaponizing interconnected industrial control systems against physical infrastructure, potentially leading to severe economic damage and food security concerns. Companies relying on older, unpatched OT systems are now at significantly higher risk, forcing a re-evaluation of their cybersecurity strategies and investment priorities. The response from French authorities, involving international cooperation and a focus on identifying other affected entities, suggests a proactive approach to mitigating future, potentially similar, threats.