On October 12, 2026, shoppers in French towns opened refrigerator doors to a scene that resembled a summer sauna rather than a grocery aisle. The chill that normally preserves fresh produce and dairy had vanished, replaced by a scorching 50 °C inside the units. The temperature spike was not a malfunction of a single appliance; it was the result of a deliberate intrusion into the digital brain that regulates the cooling systems of hundreds of supermarkets.
The attack rippled through the supply chains of two of France’s most ubiquitous grocery networks, Intermarché and Netto. In total, roughly 300 stores felt the heat, a figure that underscores both the breadth of the intrusion and the reliance of modern retail on a shared technology platform. These supermarkets, located across various French regions, suddenly found their cold aisles turned into ovens, jeopardizing the inventory that sustains daily operations for thousands of customers.
France’s national cybersecurity agency, ANSSI, traced the breach to a vulnerability in the software supplied by Danfoss, a global manufacturer of refrigeration and climate-control equipment. When a software flaw is left unpatched, it can become a backdoor for malicious actors to issue commands that override safety limits. In this case, the attackers exploited that weakness to raise the set points far beyond the design specifications, forcing the units to heat up rather than cool down.
The investigation was conducted to assess the extent of the breach and pursue the perpetrators.
Retailers faced the loss of stock that had been purchased, transported, and stocked at considerable cost. The president of the network estimated the damage in the “tens of millions of euros,” a figure that reflects not only the value of the spoiled goods but also the ancillary costs of cleaning, equipment inspection, and lost sales.
The scale of the disruption prompted swift action from French authorities. A year earlier, on October 13, 2025, the Paris prosecutor’s office had opened a cybercrime investigation, laying the groundwork for a coordinated legal response. The investigation was conducted to assess the extent of the breach and pursue the perpetrators. ANSSI’s involvement highlighted the technical dimension of the incident, emphasizing that a vulnerability in commercial refrigeration software can have repercussions that extend beyond a single retailer’s balance sheet.
Thierry Cottier, the president of the affected networks, described the incident as a critical failure. “This was a disaster, it has never happened to us on this scale,” he said, underscoring the unprecedented nature of the event. Cottier’s criticism points to a broader industry concern: the reliance on interconnected, remotely managed equipment creates new attack surfaces that traditional security measures may not fully address. The incident forced retailers to confront the reality that a cyber-incident can translate directly into food safety risks and financial loss.
The fallout from the Danfoss breach has ignited a conversation about the resilience of the cold-chain infrastructure that underpins modern food distribution. Experts argue that regular software audits, timely patch management, and segmented network architectures are essential safeguards against similar attacks. For Danfoss, the episode serves as a stark reminder that the integrity of its control software is as critical as the mechanical reliability of its hardware. For regulators and retailers alike, the incident underscores the need for a coordinated approach that blends cybersecurity best practices with the operational imperatives of food safety.
As French supermarkets begin the painstaking process of restocking shelves and rebuilding consumer confidence, the memory of refrigerators turned into ovens lingers. The episode stands as a cautionary tale: in an era where digital commands dictate the temperature of the food that ends up on our plates, a single line of vulnerable code can turn a routine shopping trip into a crisis of unprecedented heat.