Cyberattack Heats Supermarket Fridges in France, Causing Food Loss
Hackers have exploited a firmware vulnerability to raise the temperature of fridges and freezers in numerous French supermarkets to 50 degrees Celsius, leading to significant food spoilage and fires at several hundred locations. The Paris prosecutor's office reported that this large-scale cyberattack is affecting connected refrigeration systems in major food retailers across France, resulting in substantial food losses.
In response to the incident, Prime Minister Sebastien Lecornu has directed France's National Cybersecurity Agency (ANSSI) to conduct an investigation. Officials are also coordinating with European counterparts to determine if other countries may be impacted. A source close to Lecornu indicated that authorities are evaluating whether additional French companies are at risk from this cyber threat.
Felix Aime, a senior cyber threat intelligence analyst at Sekoia Threat Detection and Research, noted that countries such as Spain, Portugal, Poland, Germany, and Belgium have also experienced similar issues. Carrefour reported that 80 of its supermarkets were affected, while Monoprix indicated that five percent of its stores faced disruptions. Les Mousquetaires, the owner of Intermarche, confirmed that fridges at around 150 of its stores were heated for six hours overnight, leading to the disposal of all affected food to mitigate health risks.
Witnesses in Paris described scenes of staff at an Intermarche discarding cartfuls of defrosted frozen foods, with melted ice cream spilling onto the streets. Cooperative U's CEO Dominique Schelcher condemned the attack, emphasizing the unprecedented nature of targeting equipment vital for preserving fresh products and ensuring food supply.
Impact on Retail and Supply Chain Resilience
E.Leclerc and Auchan did not respond to requests for comment regarding the incident. Currently, there is no estimate of the overall industry losses resulting from this cyberattack. Christel Delberghe, director general at European retail association Eurocommerce, highlighted the essential role of retail and wholesale in maintaining the supply of goods across Europe, underscoring the need for resilience throughout the supply chain.
Intelligence Reviewed
Supermarket refrigeration systems are typically managed by control panels that can be accessed remotely, allowing maintenance companies to adjust settings from anywhere. A source close to Lecornu revealed that ANSSI identified a vulnerability in software provided by the Danish company Danfoss. Danfoss acknowledged awareness of incidents in France affecting a limited number of refrigeration management systems, noting that the affected units were operating outdated firmware. The company has long advised customers to keep their systems updated and migrate to current-generation solutions.
On August 9, cybersecurity firm Claroty's Team82 published research detailing vulnerabilities in the Danfoss AK-SM 800A controller, which could allow attackers to bypass authentication controls and execute code on compromised devices. This incident mirrors disruptions reported at U.S. military commissaries in late August, which also resulted in food losses due to compromised refrigeration systems.
