Cyberattack shuts down refrigerators at French supermarkets
Cyberattack defrosted refrigerators at hundreds of French supermarkets, causing food waste and financial loss.
Run Danfoss?
Get an email when a reviewed story names Danfoss, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Attackers remotely defrosted refrigerators at 250-350 French supermarkets overnight by exploiting older Danfoss refrigeration controllers. The incident caused significant financial losses and food waste across chains like Intermarché, Carrefour Market, and Leclerc. French authorities have launched an investigation into the unprecedented attack.
The lesson from this incident
Full lessonAttackers exploited known vulnerabilities in aging Danfoss refrigeration controllers to remotely disable refrigeration systems across hundreds of French supermarkets overnight, causing widespread food spoilage and significant financial damage. The root cause lies in unpatched, internet-exposed operational technology (OT) devices that lacked adequate network isolation from external threats. This incident highlights the growing danger of neglecting legacy industrial control systems (ICS) in retail and food supply environments, where cyber-physical attacks have direct, real-world consequences. The attack is a stark reminder that OT and IoT devices are increasingly targeted and must receive the same security rigor as traditional IT infrastructure.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
- cve — CVE-2025-41450