Recently, a coordinated cyber attack targeted the connected refrigeration systems of major supermarket chains across France. The intrusion was not a simple data breach; attackers gained control of the operational technology that keeps perishable goods cold, flipping the purpose of the units from preservation to peril.
Once inside the networks, the hackers raised the set points of the cooling units to approximately 50°C. What should have been a chilled environment for dairy, meat, and produce became a hot oven, rapidly degrading food quality and creating potential health hazards for consumers who might unknowingly purchase spoiled items.
The disruption was widespread, impacting roughly 150 stores nationwide. Major food companies and retail brands that rely on these refrigeration networks saw their inventory compromised, leading to significant product loss and raising concerns about supply chain stability in the immediate aftermath.
In response to the incident, the French government opened a formal inquiry, tasking the national cybersecurity agency, ANSSI, with a thorough investigation.
Investigators traced the point of entry to software vulnerabilities in outdated Danfoss controllers embedded in the refrigeration hardware. These legacy devices, still in use across many locations, lacked recent security patches, allowing the attackers to execute commands that overridden normal temperature controls.
In response to the incident, the French government opened a formal inquiry, tasking the national cybersecurity agency, ANSSI, with a thorough investigation. ANSSI’s role is to determine the full scope of the breach, identify the attackers, and recommend measures to prevent similar intrusions in critical infrastructure.
Authorities noted that comparable incidents have been reported in other European countries, suggesting that the vulnerability exploited in France may not be isolated. This cross‑border pattern has prompted regional discussions about harmonizing cybersecurity standards for industrial control systems used in food retail.
As of now, the immediate focus remains on restoring safe temperatures, assessing the extent of food spoilage, and securing the affected systems against further tampering. The episode serves as a stark reminder of how cyber threats can manifest in tangible, physical ways, turning everyday appliances into instruments of risk when defenses lapse.