Hundreds of supermarkets across France have been thrown into chaos after hackers remotely manipulated refrigeration systems, causing frozen food to thaw, fresh products to spoil, and some equipment to overheat. The cyberattack, which struck overnight between October 11 and 12, 2026, affected major grocery chains, including Intermarché, Coopérative U, Carrefour, and Monoprix.
Some refrigeration systems reportedly reached temperatures as high as 122 degrees Fahrenheit, turning equipment designed to keep food cold into a source of disruption and financial damage.
The incident affected several hundred stores, forced retailers to discard large quantities of food, and prompted an investigation by French authorities.
The attack has raised serious questions about the cybersecurity of modern supermarkets, where even refrigerators can be controlled through internet-connected technology.
Hackers Target Refrigerators at Hundreds of Stores

The attack began on Sunday night, October 11, and continued into the following morning, affecting grocery stores across France.
Instead of stealing customer information or shutting down payment systems, the attackers targeted refrigeration equipment that keeps food at appropriate storage temperatures.
Hackers reportedly accessed refrigeration controllers and remotely activated or extended their defrosting functions.
As temperatures increased, frozen products began thawing, leaving supermarket employees facing damaged inventory and disrupted operations.
At least 300 Intermarché and Netto stores and more than 100 Coopérative U locations were targeted.
Other major retailers also reported disruptions.
Carrefour confirmed that 80 supermarkets were affected, while Monoprix reported that approximately 5% of its French stores had experienced problems.
The figures emerged as retailers continued assessing the damage, meaning the full scale of the incident was still being established.
Refrigeration Temperatures Reportedly Reached 122 Degrees
One of the most alarming details involves the temperatures recorded inside affected refrigeration equipment.
That is a dramatic departure from the conditions required to preserve chilled and frozen food.
Modern commercial refrigeration systems often rely on electronic controllers to regulate cooling, monitor equipment, and manage automatic defrosting cycles.
These functions normally help prevent excessive ice buildup and keep equipment operating efficiently.
However, the attackers reportedly exploited remote access to interfere with those settings.
In some locations, the resulting overheating caused fire-related incidents, according to information released by French prosecutors.
The incident demonstrates how unauthorized access to digital controls can cause physical damage, even when the targeted equipment is something as familiar as a supermarket refrigerator.
Supermarkets Forced to Throw Away Fresh and Frozen Food
The consequences quickly became visible as employees began clearing affected refrigerators and freezers.
Stores were forced to discard products that could no longer be guaranteed to have remained at safe storage temperatures.
Frozen desserts, packaged meals, meat, and other temperature-sensitive products were among the types of merchandise at risk.
Reuters described scenes at an Intermarché supermarket in central Paris where workers removed shopping carts filled with thawed food.
Some stores temporarily closed affected sections while employees inspected refrigeration equipment and removed compromised inventory.
For supermarket operators, the losses extend beyond the value of discarded products.
Businesses must also inspect equipment, arrange replacement deliveries, clean storage areas, and restore customer confidence.
Because cold storage is essential to everyday grocery operations, even a short disruption can trigger an expensive chain reaction.
Financial Losses Could Reach Tens of Millions
The financial consequences are expected to be substantial, although a complete industry-wide damage estimate has not been released.
Thierry Cotillard, chief executive of Intermarché’s parent group Les Mousquetaires, told French broadcaster BFM TV that the incident could result in tens of millions of euros in losses across the country in a single day.
That estimate reflects the scale of the disruption, not a final accounting of damages.
At an Intermarché store in Gradignan, southwestern France, the owner reported losing approximately €21,000 worth of merchandise at purchase cost.
Insurance coverage could also be an issue.
Intermarché warned that some store insurance policies might not cover losses arising from this type of cyberattack.
That uncertainty could leave individual store operators facing substantial unexpected expenses.
Investigators Identify a Possible Software Vulnerability
Authorities are examining how attackers accessed refrigeration equipment across multiple supermarket chains.
Investigators identified vulnerabilities involving refrigeration management technology supplied by Danish manufacturer Danfoss.
The company’s equipment lets businesses remotely monitor and control commercial cooling systems.
Danfoss acknowledged incidents involving its refrigeration management products and said affected equipment ran on outdated firmware.
The manufacturer emphasized that customers should install current software updates and replace outdated systems that no longer receive security support.
Cybersecurity researchers had previously identified weaknesses affecting some Danfoss refrigeration controllers.
Those weaknesses could let unauthorized users bypass security protections and manipulate connected systems.
However, investigators still need to establish the complete sequence of events and determine exactly how the attackers exploited the affected installations.
The incident highlights a broader challenge: equipment that operates reliably for years can still become vulnerable when its software isn’t maintained.
French Authorities Launch a Major Investigation
The Paris prosecutor’s office confirmed that an investigation had been opened into the large-scale cyberattack.
Investigators are working to identify affected businesses, determine how the intrusion occurred, and establish the relationship between the attack and reported damage.
French Prime Minister Sébastien Lecornu also instructed the country’s National Cybersecurity Agency, known as ANSSI, to investigate.
Authorities are coordinating with European counterparts because similar equipment is used outside France.
Dominique Schelcher, chief executive of Coopérative U, condemned the attack, describing the targeting of essential food-preservation equipment as unprecedented.
His company said teams were working with refrigeration specialists to restore normal operations.
As of October 13, no publicly verified identification of the attackers had been announced.
Other European Countries Could Also Be Affected
Concerns have extended beyond France as cybersecurity specialists examine whether the same vulnerabilities have been exploited elsewhere.
Felix Aimé, a senior cyber threat intelligence analyst at Sekoia, told Reuters that incidents had also affected Spain, Portugal, Poland, Germany, and Belgium.
Authorities are continuing to assess the wider impact and determine whether the incidents share the same perpetrators or methods.
Separately, Dutch supermarket operator Ahold Delhaize reported a cybersecurity issue that disrupted some digital services.
However, the company said there was no established reason to link its problems to the refrigeration attacks in France.
The distinction matters because simultaneous cybersecurity incidents aren’t necessarily part of a single coordinated operation.
Why This Cyberattack Matters to American Supermarkets
Although the incident happened in Europe, it raises questions relevant to grocery retailers in the United States.
American supermarkets also depend heavily on computerized refrigeration systems, automated temperature monitoring, and remotely managed equipment.
These technologies make it easier to maintain temperatures across large stores, but remote connectivity can also create opportunities for cybercriminals if systems are inadequately protected.
Similar refrigeration disruptions were reported at approximately a dozen U.S. military commissaries in August.
Those incidents also resulted in food losses.
The French attack is another reminder that cybersecurity is no longer limited to protecting passwords, customer records, or payment systems.
It also involves safeguarding the technology that keeps essential physical services operating.
What Happens Next for Affected Supermarkets?
Some French supermarkets have already begun restoring their refrigeration equipment and reopening affected sections.
However, returning to normal operations involves more than switching refrigerators back on.
Retailers must confirm that cooling systems work properly, remove spoiled products, and replenish inventory.
Some affected stores have also kept restored equipment disconnected from networks to reduce the possibility of another intrusion.
The final financial cost, the full number of affected stores, and the identity of those responsible remain under investigation.
For shoppers, the disruption may mean temporarily empty refrigerator shelves or reduced selections at individual stores.
For the grocery industry, the bigger concern is how easily a digital security failure can disrupt an essential everyday service.
The Bottom Line
The French supermarket cyberattack demonstrates how connected technology can create unexpected vulnerabilities in the food supply chain.
What began as unauthorized interference with refrigeration controllers quickly became a nationwide problem involving spoiled food, disrupted stores, damaged equipment, and potentially enormous financial losses.
As investigators work to identify those responsible, retailers face pressure to update aging systems, strengthen network security, and prepare for similar incidents.
The most troubling lesson is that hackers no longer need to break into a supermarket or physically damage equipment to cause major disruption.
Sometimes, controlling the technology that keeps the food cold is enough.
POSTS YOU MAY LIKE:
The Lettuce in Our Refrigerators Could Make Us Sick as Cyclospora Outbreak Spreads