PARIS, October 14 — A coordinated cyberattack on the refrigeration control systems of hundreds of French supermarkets has destroyed large volumes of fresh and frozen food and laid bare how deeply Europe’s food supply chains now depend on internet-connected industrial equipment.
The assault, launched overnight on October 11, targeted control software made by Danfoss, a Danish manufacturer whose systems are used across the French retail sector. Attackers remotely forced the devices’ defrost cycles to run continuously and reset thermostat settings to 50 degrees Celsius, keeping the units heating for hours and pushing temperatures far above safe thresholds.
The damage spanned the country’s largest chains. Carrefour said about 80 of its stores were affected, while the U Cooperative reported more than 100 outlets hit and Intermarché said roughly 150 of its freezers were driven to 50 degrees for six hours. Monoprix and E.Leclerc also reported affected sites. Executives estimated losses in the millions of euros, with one chief executive warning the toll could reach tens of millions. All compromised products were discarded to protect consumers. U Cooperative chief executive Dominique Schelcher described the attack on equipment vital to France’s food supply as “extremely serious and unprecedented.”
The episode is significant less for its immediate cost than for what it reveals. France’s national cybersecurity agency, ANSSI, confirmed a vulnerability in the Danfoss software and said it was coordinating with European counterparts to identify other exposed businesses. A prime ministerial aide said the government had ordered an investigation and outreach to other European states that might be affected. The commercial and retail federation called on the vendor to be “fully transparent.”
The attack surface is structural. Refrigeration units are typically managed by control panels that oversee an entire store’s freezers and can be reached over the internet — a convenience that becomes a liability when authentication is weak. A U.S. cybersecurity firm had detailed the Danfoss vulnerabilities in August and the company issued a patch, but the affected devices were running outdated firmware, according to the manufacturer.
The disruption crossed borders. In the Netherlands, retail group Ahold Delhaize said websites and some logistics systems at several of its supermarket banners were disrupted, with distribution centres in the country largely shut and online deliveries suspended; its Delhaize banner in Belgium and Luxembourg was also hit. Authorities said there was no confirmed link between the French and Dutch incidents.
For European policymakers, the case is a pointed illustration of a broader risk: as factories, grids and grocery aisles are wired into networks, a single software flaw can translate within hours into empty shelves and wasted food. With winter approaching and food prices already a political flashpoint, the incident is likely to sharpen regulatory pressure on critical-infrastructure vendors to harden connected systems before the next breach.