French stores hit by cyberattack on refrigeration systems

In France, a cyberattack targeted refrigeration systems in hundreds of stores, causing the thawing of perishable goods and significant financial losses. The attack involved remote manipulation of equipment made by the Danish company Danfoss, leading to the breakdown of the cold chain necessary to preserve food.

Major supermarket chains affected in France

Stores operated by major supermarket chains such as Mousquetaires Group, Coopérative U, and Leclerc were among those affected. The damage ranged from tens of thousands to hundreds of thousands of euros depending on the store size and inventory. Products that could no longer be sold were discarded, leading to immediate material losses.

Employee reports contradict worst-case scenarios

Despite reports of a widespread cyberattack, some employees noted that the impact varied. In some cases, the attack occurred shortly before stores opened, allowing for limited stock preservation. Early detection by managers in other stores helped reduce the damage, indicating that the time between the attack and its discovery was a critical factor.

Vulnerabilities in Danfoss equipment were previously known

In August 2026, a cybersecurity research team called Claroty identified vulnerabilities in Danfoss and Copeland controllers. These vulnerabilities could allow attackers to manipulate refrigeration systems. While the research confirmed the risk, it did not confirm that these vulnerabilities were used in the October attacks.

Similar issues reported in the U.S. military stores

In late August 2026, refrigeration systems in U.S. military stores malfunctioned, with some installations switching to defrosting mode. Although no official confirmation of a cyberattack was given, the similarity to the French incidents raised concerns about a potential common cause or method.

Ahold Delhaize faces disruptions in Europe

In the Netherlands and Belgium, Ahold Delhaize confirmed a cybersecurity incident affecting some of its stores and distribution centers. Some systems were taken offline as a precaution, and disruptions included issues with electronic price tags and employee access to schedules. However, the exact nature of the incident remains unclear.