Cyberattacks on supermarket refrigeration systems in France, Belgium, and beyond caused massive food losses and exposed critical infrastructure vulnerabilities.
French supermarkets targeted in cyberattack
In the night of October 11 to 12, several hundred French supermarkets, including Intermarché, E.Leclerc, and Coopérative U, were hit by a cyberattack that targeted their refrigeration systems. Hackers exploited weaknesses in systems made by the Danish company Danfoss, causing remote defrosting cycles that raised temperatures to as high as 50 °C.Refrigeration systems pushed to extreme temperatures
The attacks used similar methods against refrigeration equipment from the brand Dixell, with temperature settings reaching up to 150 °C. This caused massive damage to fresh and frozen products, leading to financial losses and the temporary closure of stores. At one Intermarché in Gradignan, Gironde, nearly 21,000 euros worth of goods had to be destroyed.Similar attacks spread across Europe
Three weeks later, in the night of November 1 to 2, dozens of supermarkets in Belgium, Luxembourg, and Sweden also suffered similar cyberattacks. Ahold Delhaize reported incidents in Belgium and Luxembourg, with temperatures rising to 50 °C. In Sweden, ICA and Coop experienced similar problems, with one store confirming the attack as the cause.Other European countries also affected
In Estonia, the supermarket chain Selver confirmed that one of its stores was targeted, with its supplier Kitman Coldtech noting that attackers set a freezer to 50 °C. Rapid action helped prevent major losses. In Ireland, the Musgrave group admitted to a limited incident involving a specific refrigerator model in its SuperValu stores. Disruptions were also reported in the Netherlands, though details were not fully disclosed.Vulnerabilities in refrigeration systems exposed
The cyberattacks revealed weaknesses in refrigeration systems, with some equipment being outdated and lacking security updates. The French cybersecurity agency CERT-FR identified specific controllers from Danfoss and Dixell as being exposed to the internet, which is against standard security practices. Investigations were launched by the Paris prosecutor's office and the U.S. military police after similar incidents were reported at U.S. military facilities.Calls for improved security and governance
The attacks sparked concerns about food security and national security, with experts warning that vulnerabilities in food infrastructure could be used to create instability. The incidents highlighted the need for better management of systemic risks, including securing connected devices and creating emergency plans to handle such threats.
