Cyberattack defrosts French supermarket freezers, spoiling food at 100s of stores
Freezer temperatures were remotely raised to as high as 50 C at stores across France
Hackers raised the temperature of refrigerators and freezers at hundreds of French supermarkets to as high as 50 C overnight, causing fires and spoiling food.
asserted
Hackers → defrost → food
The Paris prosecutor's office said on Monday that a "large-scale" attack was "affecting connected refrigerators in several major food retailers across France," leading to food losses and fires.
asserted
attack → say → losses
Prime Minister Sebastien Lecornu has instructed France's National Cybersecurity Agency (ANSSI) to investigate, a person in his office said.
asserted
person → instruct → office
France was co-ordinating with European counterparts because other countries could also be affected, the person said, adding that authorities were assessing whether other French companies were at risk.
uncertain
companies → co → risk
Félix Aimé, a senior cyber threat intelligence analyst at Sekoia Threat Detection and Research, said Spain, Portugal, Poland, Germany and Belgium had also been affected.
asserted
Spain → say → Detection
Carrefour said 80 of its supermarkets were hit, while Monoprix, which operates about 490 stores in France, said five per cent of its stores were affected.
asserted
cent → say → stores
A frozen food aisle at a supermarket near Nantes, closed after a cyberattack targeted refrigeration systems at French supermarket chains, causing food losses and fires at several stores.
asserted
cyberattack → close → stores
All affected food thrown out
Les Mousquetaires, owner of retailer Intermarché, said fridges at around 150 of its stores were heated up to 50 C for six hours overnight.
asserted
fridges → throw → hours
A spokesperson said all affected food had been discarded to eliminate health risks.
asserted
food → say → risks
Paris resident Geert de Clercq witnessed staff at an Intermarché in central Paris throwing cartfuls of defrosted frozen foods into a giant trash container, with molten ice cream sloshing out of broken tubs on the street.
asserted
cream → witness → street
Coopérative U CEO Dominique Schelcher said his supermarket group had also been targeted.
asserted
group → say → ?
"Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is of extreme gravity and is unprecedented," he wrote on X.
Food retailers E.Leclerc and Auchan did not respond to requests for comment.
asserted
E.Leclerc → target → comment
There was no immediate estimate of industry-wide losses, but Intermarché CEO Thierry Cotillard told BFM TV the "unprecedented" attack would represent losses amounting to "tens of millions of euros nationwide in a single day.
asserted
attack → be → day
"
Christel Delberghe, director general at European retail association Eurocommerce, said, "This incident underlines the importance of resilience across the entire supply chain."
Control panels accessible over internet
Supermarket cold aisles are typically run by control panels that manage an entire store's fridges and freezers and can be accessed over the internet, which lets maintenance companies adjust them from anywhere.
The source close to Lecornu said ANSSI had identified a vulnerability in software supplied by Danish company Danfoss.
asserted
ANSSI → say → Danfoss
Danfoss said it was "aware of incidents in France affecting a limited number of refrigeration management systems.
asserted
it → say → systems
The affected units "were running outdated firmware," Danfoss said, adding that it had "long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions."
asserted
systems → affect → solutions
On Aug. 9, cybersecurity firm Claroty's Team82 published research detailing vulnerabilities in the Danfoss AK-SM 800A controller.
asserted
Team82 → publish → controller
According to the report, software updates issued by Danfoss addressed issues that could have allowed attackers to bypass authentication controls and execute code on compromised devices.
uncertain
attackers → accord → devices
The attacks resemble disruptions reported at about a dozen U.S. military commissaries in late August that led to food losses after fridges were affected.
asserted
fridges → resemble → losses
Dutch security issue
Dutch retailer Ahold Delhaize, which operates the Netherlands's largest supermarket chain Albert Heijn and has major operations in the U.S., said it was dealing with a "security issue" on its network and had taken several systems offline as a precaution.
asserted
it → operate → precaution
A message on the retailer's smartphone app said it was unable to deliver groceries because of a "cybersecurity incident."
asserted
it → say → incident
Online orders account for about 10 per cent of Albert Heijn sales.
asserted
orders → account → sales
Physical stores remained open, while Dutch news agency ANP reported that rival retailers had seen a surge in delivery orders.
asserted
retailers → remain → orders
Ahold Delhaize said there was no reason to see a link between the incidents in France and its supermarkets.
asserted
Delhaize → say → France
Websites for its Stop & Shop, Giant, Hannaford and Food Lion chains displayed notices saying "site temporarily down."
asserted
site → display → notices
It was unclear whether other operations had been affected.
uncertain
operations → affect → ?
The Aporia
