OMM Redaksiyası
French authorities have launched a large-scale investigation into a cyberattack that disrupted refrigeration systems at hundreds of supermarkets. The incident spoiled food, forced stores to discard products and caused fires in some cases.
The attack targeted internet-connected equipment used to control supermarket refrigerators and freezers. After the systems were compromised, temperatures rose well above safe storage levels overnight.
Several major French grocery chains reported disruptions after refrigeration units suddenly warmed. Thousands of products became unusable, and stores discarded large quantities of fresh and frozen food to prevent possible health risks.
Industry executives described the incident as unprecedented and said financial losses could reach tens of millions of euros. According to the French prosecutor’s office, the attack affected refrigeration systems used by several major retail chains. Law enforcement and cybersecurity agencies responded nationwide.
Several major supermarket chains targeted
Carrefour said 80 of its supermarkets were affected by the attack. Monoprix, which operates about 490 stores in France, said problems occurred at 5% of its locations.
Les Mousquetaires, the owner of the Intermarche chain, said refrigerators at around 150 of its stores heated up to 50 degrees Celsius over a six-hour period overnight. A company representative said all affected food was discarded to eliminate health risks.
Dominique Schelcher, chief executive of supermarket group Cooperative U, also said the company had been targeted. He wrote on X: “Targeting essential equipment that protects fresh produce and helps ensure France’s food supply is an extremely serious and unprecedented incident.”
Investigation focuses on software vulnerabilities
The French government has tasked the country’s cybersecurity agencies with determining how the attack was carried out and whether other sectors are vulnerable to similar interference. Officials have begun coordinating with European partners after reports that companies in several other countries had experienced similar disruptions.
Cybersecurity analysts said incidents linked to the attack had been recorded in parts of Western and Central Europe. This has raised concerns that widely used commercial refrigeration technology may have been targeted.
Initial assessments suggest the attackers exploited vulnerabilities in software that controls refrigeration systems used by retail chains. Modern supermarkets use centralized systems that allow temperatures to be monitored and adjusted remotely.
Investigators are examining whether outdated software and systems that had not been updated in time enabled the attack. A company linked to the manufacture of some of the affected equipment said it was aware of the incident and noted reports that older software versions were being used on those systems.
Cybersecurity experts have long warned that internet-connected industrial and commercial equipment can become an attractive target for attackers when security updates are not applied regularly.
The incident has heightened concerns about cyberattacks targeting supply chains and consumer services. Retail groups have said attacks on systems responsible for keeping food safe pose risks to both businesses and the public food supply.
Supermarkets increasingly rely on internet-connected technologies to manage inventory, logistics and refrigeration systems. Industry associations have called for more information about the vulnerability used in the attack and urged companies to review the security of connected equipment.
Concern has also grown beyond France: Dutch retail giant Ahold Delhaize reported a cybersecurity incident affecting parts of its network. As a precaution, the company temporarily shut down some systems, disrupting online services and grocery deliveries.
No confirmed link has been established between the incident in the Netherlands and the attacks in France. However, both events have drawn attention to the growing cyber risks facing major retailers.
The incident could renew debate over the security of internet-connected equipment and technologies that control physical infrastructure. For the retail sector, the attack could have consequences not only in financial losses and supply disruptions but also in food waste and public safety.
