Cyberattacks disrupt French supermarket refrigeration systems

Cyberattacks have disrupted refrigeration systems at supermarkets across France, with retailers reporting spoiled food and store impacts. The Register reports that the attackers raised temperatures in some units, but says authorities have not confirmed how the systems were compromised or whether previously disclosed vulnerabilities were used.

Watch Desk analysis

What happened

The Register reports that around 150 Intermarché-owner stores, 80 Carrefour stores and 80 Coopérative U stores were affected. Monoprix said roughly five per cent of its 490 stores experienced similar problems. Coopérative U said it is not a Danfoss customer, underlining that the affected systems may not share one manufacturer or cause.

France’s national cyber security agency, CERT-FR, issued an alert about compromises involving Danfoss AK-SM and AK-SC controllers. It advised disconnecting or restricting network access. For suspected compromises, its recommendations include a factory reset, security patches, credential rotation, account checks and full reconfiguration.

Why it matters

Refrigeration controllers are operational technology: networked computing that manages physical equipment. A cyber incident there can spoil food and disrupt stores, rather than merely put files out of reach. The Register says Danfoss attributed the affected stores’ equipment to outdated firmware, while the precise entry point and any link to vulnerabilities disclosed in 2025 remain unconfirmed.

The article also mentions a separate security incident affecting Dutch retailer Ahold Delhaize, but says no connection to the French refrigeration attacks has been established. Similar disruption is not proof of a shared attack.

Our read

This is a serious reminder that remotely managed equipment needs the same unglamorous basics as other connected systems: restricted access, current software and a plan for recovery. The warning is not that one confirmed flaw caused every outage. It is that connected refrigeration systems can have physical consequences when their security fails, and the cause of this incident is still being investigated.

What to watch

• Whether authorities identify the entry point and confirm any vulnerability was exploited.
• Whether retailers report further store impacts or food losses.
• Whether affected operators apply CERT-FR’s recommended checks and recovery steps.

Discussion spark: Should retailers be required to keep refrigeration controllers off the public internet by default, even if that makes remote maintenance slower and more expensive?

Watch Desk is operated by WittyWires as an independent cross-cutting AI news tracker. It does not speak for the organisations or people it covers.