Advertisement

Food lost as hundreds of supermarkets hit in cyberattack

Intermarche's owner says food products have to be disposed of after fridges were set to defrost.

Intermarche's owner says food products have to be disposed of after fridges were set to defrost. Photo: AAP

Hundreds of supermarkets have been forced to throw out spoiled frozen food after an “unprecedented” cyberattack across France.

Hackers forced the temperature of ‌fridges up to 50C in various supermarket chains on Sunday night (local time), causing fires and food losses.

The Paris prosecutor’s office said the “large scale” attack was “affecting connected refrigerators in several major food retailers across France”.

Up to 200 Intermarche stores were hit, with fridges heated to 50C for ‌six hours. Hackers managed to switch refrigerators and freezers to defrost mode.

Supermarket staff were seen throwing ​cartfuls of defrosted frozen foods into a giant rubbish container in Paris, with molten ice cream sloshing out of broken tubs on the street.

Carrefour said 80 of its supermarkets had been hit while Monoprix said five per cent of its stores were affected.

Cooperative U CEO Dominique Schelcher said his supermarket had also been targeted.

“Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is of extreme gravity and is unprecedented,” he wrote on X.

supermarket

Supermarket cold aisles are typically run by control panels that can be accessed over the internet. Photo: AAP

“Retail and wholesale play an essential role in keeping Europe supplied with the goods people rely on every day,” said Christel ⁠Delberghe, director general at European retail association Eurocommerce.

“This incident underlines the importance of resilience across the entire supply ‌chain.”

Supermarket cold aisles are typically run by control panels that manage an entire store’s fridges and freezers and can be accessed over the internet, which lets maintenance companies adjust them from ​anywhere.

Prime Minister Sebastien Lecornu instructed France’s National Cybersecurity Agency ANSSI to investigate, a person in his office said.

They said France “was co-ordinating with its European counterparts, as other countries may also be affected,” while also investigating whether any other French firms were at risk.

Felix Aime, a senior cyber threat intelligence analyst at Sekoia Threat Detection and Research, said Spain, Portugal, Poland, Germany and Belgium had also been affected.

A source close ‌to Lecornu said ANSSI had identified a vulnerability in software supplied by Danish company Danfoss.

Danfoss said it was “aware of incidents in France affecting a limited number of refrigeration management ​systems”.

The affected units “were running outdated firmware,” Danfoss said, adding that it had “long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions”.

On August 9, cybersecurity firm Claroty’s Team82 published research detailing vulnerabilities in the Danfoss AK-SM 800A controller.

According to the report, software updates issued by Danfoss addressed issues ​that ​could have allowed attackers to bypass authentication controls and execute code on compromised devices.

The ​attacks resemble disruptions reported at about a dozen US military commissaries in late August that ‌led to food losses after fridges were affected.

Dutch supermarket operator Ahold Delhaize, which operates the Netherlands’ largest supermarket chain Albert ​Heijn and has major ‌operations in the United States, said it was also dealing with a “security issue” in its network, and had taken several systems ​offline to protect them.

A smartphone app for the retailer told clients that due to a “cybersecurity incident” it was unable to deliver groceries.

Online orders represent about 10 per cent of sales for Albert Heijn.

Physical stores remained open and Dutch news agency ​ANP reported ​that rivals had noted an influx of delivery ​orders.

Ahold Delhaize said there was ​no reason to see a link between the incidents in France and its supermarkets.

Ahold is the fourth-largest grocery retailer in the US, where websites for its Stop & Shop, Giant, Hannaford and Food Lion stores all had notices saying “site temporarily down”.

-with AAP/DPA

Advertisement
Stay informed, daily
A FREE subscription to The New Daily arrives every morning and evening.
The New Daily is a trusted source of national news and information and is provided free for all Australians. Read our editorial charter.
Copyright © 2026 The New Daily.
All rights reserved.