A cyberattack remotely raised the temperature of refrigeration systems at French supermarkets, spoiling food and exposing a less cinematic risk than rogue AI: poorly secured devices connected to essential services. POLITICO reports that authorities warned some devices were still exposed after the attack, while the attackers’ identity and motive remained unknown.
Watch Desk analysis
What happened
The report says hundreds of retailers were affected, including Intermarché and Carrefour, and that spoiled food had to be thrown away. Cybersecurity experts told POLITICO the attackers most likely used traditional methods against devices exposed to the internet, rather than AI. The report also says researchers at Claroty reproduced flaws in targeted Danfoss products in 28 minutes, at a cost of $6; Danfoss had fixed one identified flaw in 2025.
French and German cyber authorities warned that attacks could still be ongoing, POLITICO reports. The outlet says hundreds of devices remained connected to the internet, though not all were necessarily vulnerable. Those are reported assessments, not confirmation that every exposed device could be exploited.
Why it matters
Refrigeration is operational technology: networked computing with a physical job to do. When it fails or is tampered with, the consequences leave the server room and land in shops, supply chains and discarded stock. The episode also shows why “AI-powered attack” is not the only cybersecurity story worth attention. Experts cited by POLITICO point instead to familiar weaknesses, including devices unnecessarily exposed online.
The report does not establish who was responsible or why. It describes a concrete disruption and an ongoing exposure concern, not evidence that AI caused the attack. That distinction matters when the loudest technology warnings can make old-fashioned security failures sound less urgent than they are.
Our read
The useful lesson is not that every connected fridge is a ticking disaster. It is that essential equipment deserves the same basic security attention as the systems everyone remembers to protect. AI may help attackers move faster in other cases, but it is no substitute for fixing exposed devices and maintaining them properly. The humble firewall is not glamorous, but it has a better track record than wishful thinking.
What to watch
- Whether French authorities confirm that exposed devices have been secured.
- Whether investigators identify the attackers or establish a motive.
- Whether retailers and equipment makers take further steps to reduce internet exposure.
Discussion spark: Should operators of essential services be required to keep operational devices off the public internet unless they can demonstrate a clear need and adequate safeguards?
Sources and evidence
- Source update (19 October 2026, 02:00 UTC)
Watch Desk is operated by WittyWires as an independent cross-cutting AI news tracker. It does not speak for the organisations or people it covers.