Supermarket Fridges Hacked: Is a New Cyber Exploit Putting Food Supplies at Risk?

Hundreds of French supermarkets have been affected by a major cyber attack that caused refrigeration units to heat up, putting fresh and frozen food at risk and potentially costing retailers millions of euros. The incident has raised wider concerns about cybersecurity in the food retail sector, including in the UK and internationally.

Supermarket chains across France, including Intermarché, Netto, Coopérative U, Carrefour, Monoprix and E.Leclerc, have been targeted in an attack on refrigeration management software supplied by Danish engineering firm Danfoss.

The hackers reportedly gained control of the software used to regulate fridge and freezer temperatures, forcing some units to heat up to 50°C for several hours overnight. The incident left retailers facing significant food losses, disrupted operations and concerns over food safety.

Around 400 French supermarkets reportedly affected

Figures provided by individual retailers suggest that approximately 400 stores have been affected out of around 15,000 supermarkets across France.

Coopérative U reported that more than 100 of its supermarkets had been targeted. Meanwhile, around 180 Intermarché and Netto stores were affected, with a further 100 reportedly disconnected from the internet as a precaution.

Carrefour said refrigeration units in 80 of its approximately 6,000 stores had been hacked. Monoprix also reported incidents affecting around 5% of its more than 400 stores, removing food from sale wherever its condition could not be guaranteed.

The full extent of the damage remains unclear, although early reports indicate that the cost of spoiled food could reach millions of euros nationwide.

Hackers exploit supermarket refrigeration systems

The attack targeted software that enables retailers to monitor and manage refrigeration units remotely. Supermarkets typically allow freezers to undergo short overnight defrosting cycles, during which temperatures rise temporarily.

However, the hackers reportedly manipulated the systems to keep the units heating for extended periods, causing temperatures to rise far beyond normal operating levels.

Intermarché said some refrigeration units reached 50°C for six hours overnight into Monday. According to Reuters, the retailer discarded all affected food to avoid potential health risks.

The Mousquetaires Group, which owns Intermarché and Netto, said some fresh and frozen food display units remained out of service on Monday afternoon. The group added that stores had removed products from affected units and were working to replenish shelves as quickly as possible.

French broadcaster BFMTV also published an image showing a freezer in an ice cream aisle displaying a temperature of 26.5°C. Reports from some locations suggested that small fires had occurred.

Two supermarkets in the Alsace region reportedly recorded combined losses of €270,000 (£228,000), raising concerns that the financial impact could be considerably greater across France.

Danfoss points to older refrigeration systems

Danfoss said the affected refrigeration units were older models whose security software could not be updated to address a previously identified vulnerability.

The Danish engineering company said it had long advised businesses to keep supported systems up to date, stressing the importance of reliable refrigeration for retailers.

The incident highlights the risks associated with connected refrigeration equipment and other operational technology used in essential retail infrastructure. Although remote management systems can improve efficiency, compromised access can disrupt temperature controls, damage stock and create significant operational challenges.

UK supermarkets: Could a similar cyber attack happen in Britain?

The incident in France raises questions about the cybersecurity of supermarket refrigeration systems in the UK, where major retailers also depend on connected equipment to maintain chilled and frozen food supplies.

British supermarkets use refrigeration technology to protect perishable goods, manage energy consumption and maintain temperatures across stores, warehouses and distribution facilities. Where such systems are connected to remote monitoring or management networks, cybersecurity becomes an important part of protecting day-to-day operations.

A similar incident in the UK could potentially lead to spoiled food, disrupted supermarket services, financial losses and additional pressure on food supply chains. The extent of any impact would depend on the systems affected, the number of sites involved and how quickly retailers could isolate compromised equipment.

However, there is no indication in the information currently available that UK supermarkets have been affected by this particular attack. The reported incidents concern retailers operating in France, and any suggestion of a direct threat to British stores would require independent confirmation.

UK retailers can reduce exposure to similar risks by reviewing the security of connected refrigeration equipment, replacing unsupported systems, applying available security updates and restricting remote access to authorised users. Monitoring for unusual temperature changes and maintaining contingency plans for refrigeration failures are also important safeguards.

The incident serves as a reminder that supermarket cybersecurity extends beyond payment systems, customer data and online shopping platforms. Equipment responsible for preserving food can also become a target, with consequences that reach directly into stores and supply chains.

Rest of the world: A warning for global food retail

The French supermarket attack also highlights a wider international concern: the growing reliance on connected technology to operate essential food retail infrastructure.

Supermarkets across Europe, North America, Asia and other regions use automated systems to manage refrigeration, heating, ventilation, energy consumption and stock handling. If these systems are exposed to cyber threats, the consequences can extend beyond digital disruption to physical damage, food waste and interruptions to business operations.

The potential financial impact of a large-scale refrigeration attack could include the cost of discarded products, emergency repairs, equipment replacement, lost sales and operational downtime. Retailers may also face reputational damage if customers lose confidence in the safety or availability of food.

For countries that depend on complex distribution networks and centralised warehouses, disruptions to refrigeration could create additional logistical challenges. The impact would vary according to the scale of an incident, the resilience of local supply chains and the availability of alternative storage facilities.

The attack reinforces the importance of treating operational technology as part of an organisation's wider cybersecurity strategy. Retailers and technology suppliers need to assess legacy equipment, control access to remote management platforms, segment critical systems from general corporate networks and prepare recovery procedures for incidents affecting physical infrastructure.

There is, however, no evidence in the supplied reports that the French incident has spread to other countries. Its international significance lies in the vulnerabilities it highlights rather than any confirmed global outbreak.

French authorities launch cyber-crime investigation

French prosecutors have opened a dedicated cyber-crime investigation into the incident.

The Paris prosecutor's office described it as a large-scale cyber attack affecting refrigeration systems at several major food retail chains across France.

European Commissioner for Agriculture and Food Christophe Hansen condemned the attack in a post on X, warning that food security required greater attention at every level. He added that the weaponisation of food had become a reality.

Coopérative U chief executive Dominique Schelcher said staff were working alongside refrigeration specialists to restore normal operations as quickly as possible. He also called for an investigation, describing attacks on equipment essential to the French food supply as unacceptable.

What the attack means for supermarket cybersecurity

The incident demonstrates how cyber attacks can extend beyond computer networks to affect physical infrastructure, food supply chains and everyday retail operations.

For supermarkets, refrigeration failures can result in substantial financial losses, food waste, stock shortages and potential risks to consumers if temperature-sensitive products are not handled appropriately.

Retailers in France, the UK and elsewhere face the challenge of securing increasingly connected infrastructure while maintaining reliable services. Reviewing legacy equipment, improving network security and preparing for operational disruptions will be important in reducing the risks.

Investigators are continuing to examine the incident. The full financial cost, the identity of the attackers and the precise method used to compromise the refrigeration systems remain unclear.

For the global food retail industry, the attack is a stark warning that cybersecurity is not just about protecting data: it is also about protecting the systems that keep food safe.