Hackers Heat Supermarket Fridges to 50°C in France Cyberattack
Hackers heat French supermarket fridges to 50°C, spoiling food stocks.
Run Danfoss?
Get an email when a reviewed story names Danfoss, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A cyberattack in France targeted supermarket refrigeration systems, causing temperatures to reach 50°C and spoiling food stocks. The attack, which reportedly manipulated defrosting functions in older control software from Danish manufacturer Danfoss, affected major chains like Intermarché, Super U, and E.Leclerc, leading to significant financial losses estimated in the millions of euros. Separately, retailers in the Netherlands and Belgium experienced IT outages, though no direct link to the French incident has been confirmed.
The lesson from this incident
Full lessonAttackers exploited vulnerabilities in legacy industrial control software from Danfoss to manipulate refrigeration defrost cycles, driving temperatures to 50°C and causing millions of euros in food spoilage losses. The root problem lies in operational technology (OT) systems — refrigeration controllers, HVAC, and similar industrial devices — being reachable over networks without adequate isolation from corporate IT environments or the internet. Older control software in critical infrastructure is frequently unpatched and unmonitored, creating a wide attack surface that is attractive to threat actors seeking physical, financial, or disruptive impact. This incident underscores that cyberattacks are no longer confined to data theft; they can cause direct physical and economic harm to essential supply chains.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.