A reported cyberattacks targeting refrigeration systems at hundreds of French supermarkets has raised concerns about food security, economic resilience and the growing risks of digitising critical civilian infrastructure.
The incident reportedly affected about 700 stores operated by major retail groups, including Intermarché, Coopérative U, Carrefour, Monoprix and E. Leclerc. Refrigeration and freezer units allegedly malfunctioned after their connected control systems were compromised, causing temperatures to rise sharply, spoiling fresh and frozen food and triggering localised smoke incidents and small fires in some branches.
The reported losses, estimated at millions of euros in wasted merchandise, could extend beyond retailers to food manufacturers, farmers, transport companies and smaller suppliers whose products depend on uninterrupted cold storage. Independent shop owners and small distributors may be particularly exposed because they often lack the financial reserves, insurance coverage and technical capacity available to major supermarket chains.
The incident also highlights a governance challenge for the French government. Prime Minister Sébastien Lecornu was reported to have tasked the National Agency for Information Systems Security (ANSSI) with investigating the suspected breach and assessing potential exposure across other businesses and industrial sectors. The investigation would test the government’s capacity to coordinate cybersecurity, public-health protection and economic continuity when digital systems underpin essential services.
The suspected exploitation of a vulnerability in refrigeration management software associated with Danish engineering company Danfoss, alongside reports of outdated firmware on affected equipment, underscores the risks of connecting operational technology to remote management networks without adequate safeguards. However, the precise attack method, the extent of the software vulnerability and responsibility for the incident require independent confirmation.
Consequences against businesses could include emergency stock replacement, lost sales, higher insurance premiums, costly system upgrades and tighter cybersecurity requirements from regulators and commercial partners. Consumers could also face temporary product shortages and upward pressure on food prices if losses disrupt distribution or suppliers pass on additional costs.
Reports of related disruptions in other European countries, including Belgium, the Netherlands, Spain, Portugal, Poland and Germany, raise the possibility of a cross-border supply-chain risk. Authorities would need to establish whether these incidents share a common cause before treating them as part of a coordinated campaign.
Continue reading with Eandel
Subscribe to unlock the complete story and receive your subscriber benefits.