In the quiet hours of an autumn night, an unseen hand reached into the refrigerated heart of France's food supply and turned up the heat — literally. Hackers exploited a known but unpatched vulnerability in widely used refrigeration software to remotely drive hundreds of supermarket fridges to 50 degrees Celsius, triggering fires and destroying perishable inventories across major retail chains. The attack, which rippled into the Netherlands and the United States, is a stark reminder that the mundane infrastructure sustaining daily life — the cold chain keeping food safe — is as much a target o
French supermarket cyberattack heats fridges to 50°C, causing fires and massive food losses
Significant food losses across hundreds of stores and potential fire hazards endangered store operations and supply chains.
Targeting equipment essential to food supply is unprecedented
Mark
So hackers literally just turned up the heat on hundreds of fridges at once? How is that even possible?
Mimi
The refrigeration units were connected to the internet and managed remotely through software. Once attackers found their way into that software—in this case, through a known vulnerability in Danfoss systems—they could control the temperature settings across many stores simultaneously.
Luke
But here's the thing: Danfoss says the affected units were running outdated firmware. So this wasn't a zero-day exploit. This was a known vulnerability that hadn't been patched.
Mark
So the supermarkets knew about this risk and didn't fix it?
Mimi
Not necessarily knew. But Danfoss had been advising customers to update for a while. Whether every store actually did that is another question—and clearly many didn't.
Luke
Right. We don't know if this was negligence, budget constraints, or just the complexity of managing thousands of stores. The source material doesn't tell us that.
Mark
What about the fires? How do you get fires from overheating a fridge?
Mimi
Refrigeration systems have compressors and electrical components. Push them to 50 degrees Celsius for six hours and you're stressing every part of the system. Electrical fires are a real risk.
Luke
Though the source says fires happened—it doesn't detail how many, how severe, or whether anyone was injured. We know there were fires, but the specifics are limited.
Mark
And this happened in other countries too?
Mimi
Ahold Delhaize in the Netherlands and their US operations reported security incidents around the same time. Whether it's the same attack or a copycat or coincidence, nobody's confirmed yet.
Luke
That's important to flag. The narrative wants to connect them, but the source explicitly says "it was not clear if there was any link." We should hold that uncertainty.
Mark
So what happens now?
Mimi
ANSSI is investigating. They're checking whether other European countries were hit and whether other French companies are still vulnerable. The real question is whether companies will actually patch their systems this time.
Der Puls
- Overnight and without warning, refrigerators across hundreds of French supermarkets were remotely driven to 122°F, igniting fires and rendering entire inventories of perishable food unsafe to consume.
- Major chains — Intermarché, Cooperative U, and Carrefour among them — absorbed the blow simultaneously, with one parent company alone losing six hours of dangerously elevated temperatures across 150 stores before discarding all affected stock.
- The attack crossed borders: Dutch giant Ahold Delhaize pulled systems offline, Albert Heijn customers lost access to online orders, and Stop & Shop, Giant, and Hannaford websites in the United States went dark, raising fears of a coordinated international campaign.
- Investigators traced the breach to outdated firmware in Danfoss refrigeration management systems — a vulnerability the Danish manufacturer had previously warned customers to patch, making the damage as much a failure of maintenance as of defense.
- France's cybersecurity agency ANSSI has launched a full investigation under government directive, racing to determine whether other European nations were targeted and whether additional French retailers remain exposed to the same flaw.
In the quiet hours of an autumn night, an unseen hand reached into the refrigerated heart of France's food supply and turned up the heat — literally. Hackers exploited a known but unpatched vulnerability in widely used refrigeration software to remotely drive hundreds of supermarket fridges to 50 degrees Celsius, triggering fires and destroying perishable inventories across major retail chains. The attack, which rippled into the Netherlands and the United States, is a stark reminder that the mundane infrastructure sustaining daily life — the cold chain keeping food safe — is as much a target of modern conflict as any server or power grid. What was preventable through routine maintenance became, through neglect, a crisis of food safety, supply, and national security.
In the early hours of an October night, hackers seized remote control of refrigeration systems in hundreds of French supermarkets and drove temperatures to 50 degrees Celsius — hot enough to start fires and destroy everything stored inside. The Paris prosecutor's office confirmed a large-scale, coordinated cyberattack targeting connected fridges across several of France's major food retail chains.
The damage was sweeping. Intermarché's parent company Les Mousquetaires reported around 150 affected stores, with fridges held at dangerous temperatures for six hours before all inventory was discarded as a precaution. Cooperative U's CEO called the assault "unprecedented," framing it as an attack on the very infrastructure that feeds the French people. Carrefour confirmed 80 of its stores were hit, while Monoprix, E.Leclerc, and Auchan declined to comment on their exposure.
The crisis did not stay within France. Dutch operator Ahold Delhaize — parent of Albert Heijn, the Netherlands' largest supermarket chain — reported its own security incident and took systems offline. Customers found they could no longer place online grocery orders, a meaningful blow given that digital sales account for roughly a tenth of the chain's revenue. Across the Atlantic, Ahold's American banners including Stop & Shop, Giant, and Hannaford posted shutdown notices on their websites. Whether these incidents were directly linked to the French attack remained under investigation.
Authorities quickly identified the entry point: a vulnerability in refrigeration management software made by Danish firm Danfoss, running on outdated firmware that the company had long urged customers to update. The flaw was known. The patch existed. The systems simply hadn't been maintained. France's cybersecurity agency ANSSI, acting on instructions from Prime Minister Lecornu, launched a full investigation and began coordinating with European partners to assess how far the attack had spread — and how many more systems might still be at risk.
Overnight, hackers seized control of refrigeration systems across hundreds of French supermarkets and cranked them to 50 degrees Celsius—122 degrees Fahrenheit—hot enough to ignite fires and destroy entire inventories of perishable goods. The scale was immediate and coordinated: the Paris prosecutor's office confirmed a "large-scale" cyberattack targeting "connected refrigerators in several major food retailers across France," with documented damage including fires and catastrophic food losses.
Les Mousquetaires, the parent company of Intermarché, reported that roughly 150 of its stores fell victim to the attack. The company's fridges remained at that dangerous temperature for six hours straight. Rather than risk contamination, the company discarded all affected inventory—a decision that underscores how thoroughly the attack compromised food safety protocols. Cooperative U, another major supermarket operator, was also hit. Its CEO, Dominique Schelcher, released a statement calling the assault "unprecedented" and describing it as an attack on "equipment essential to the preservation of fresh products and to the food supply of the French people." Carrefour, France's largest retailer, confirmed that 80 of its stores were affected, though the company emphasized that the vast majority of its 6,000-store network remained untouched. Other chains—Monoprix, E.Leclerc, and Auchan—declined to comment on whether they had been targeted.
The breach did not stop at France's borders. Ahold Delhaize, a Dutch supermarket operator that runs Albert Heijn (the Netherlands' largest supermarket chain) and substantial operations in the United States, reported its own "security issue." The company took several systems offline as a precaution. Albert Heijn's mobile app informed customers that due to a "cybersecurity incident," the retailer could not fulfill online grocery orders—a significant disruption given that online sales represent roughly 10 percent of the chain's revenue. Dutch news outlets reported that competitors saw a surge in delivery orders as customers sought alternatives. In the United States, Ahold's Stop & Shop, Giant, Hannaford, and Food Lion websites all displayed notices indicating temporary shutdowns. Whether these incidents were connected to the French attack remained unclear.
Investigators quickly identified the culprit: a vulnerability in refrigeration management software supplied by Danfoss, a Danish company. According to a source close to Prime Minister Sebastien Lecornu, France's National Cybersecurity Agency ANSSI pinpointed the flaw. Danfoss acknowledged the problem in a statement, saying it was "aware of incidents in France affecting a limited number of refrigeration management systems." The company added a crucial detail: the affected units "were running outdated firmware." Danfoss emphasized that it had "long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions"—a reminder that the vulnerability had been known and preventable.
The French government moved quickly. Lecornu instructed ANSSI to launch a full investigation and to coordinate with European counterparts, recognizing that other nations might have been targeted by the same attack. Officials also began examining whether additional French companies remained exposed to the same vulnerability. The incident exposed a critical weak point in the infrastructure that keeps food fresh and available: connected refrigeration systems, once updated and secured, had become a vector for sabotage when left to run on outdated code. What began as a technical oversight—systems not patched, firmware not upgraded—had cascaded into fires, spoiled food, and a supply chain crisis that stretched across multiple countries.
Bemerkenswerte Zitate
Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is of extreme gravity and is unprecedented— Dominique Schelcher, CEO of Cooperative U
Möchten Sie die ganze Geschichte?
Das Original lesen bei Devdiscourse ↗
Politics & Governance