Cyberattack Hits French Supermarkets, Disrupting Food Supply

On Monday, several major French supermarket chains faced a cyberattack affecting their refrigeration systems. This security breach led to an increase in temperatures within refrigerators across hundreds of stores. As a result, spoiled food had to be discarded, raising significant concerns about food security.

Impact on Major Retailers

Top retail chains such as E. Leclerc, Intermarché, and Cooperative U confirmed the cyberattack. Cooperative U’s CEO described the incident as “unprecedented.” These cyberattacks emphasized the need for heightened attention to food security, as noted by the EU’s food and agriculture commissioner, Christophe Hansen.

At least 300 Intermarché outlets, including those under the Netto brand, more than 100 Cooperative U stores, and several E. Leclerc locations were affected. The targeting of equipment crucial for preserving fresh products and ensuring food supply in France was unprecedented, according to Cooperative U CEO Dominique Schelcher.

Paris Prosecutor’s Confirmation

The Paris prosecutor’s office confirmed the attack, which also reportedly initiated fires. BFM TV revealed that hackers remotely induced defrosting in refrigeration systems at numerous stores. Affected branches faced the obligation to discard all fresh and frozen products.

Carrefour reported attacks on 80 supermarkets, though most of its 6,000 stores remained unaffected. E. Leclerc confirmed that the attack impacted a refrigeration equipment supplier, influencing the operation of refrigeration systems at various stores.

Technical Details and Manufacturer’s Response

The cyberattack primarily targeted refrigeration control systems from Danish manufacturer Danfoss. These systems, such as the AK-SM800 and AK-SC355, no longer receive software or security updates. Danfoss highlighted the outdated firmware issue and had previously advised supermarkets to upgrade from these models.

Dutch supermarket operator Ahold Delhaize, which operates in the United States as well, acknowledged a “security issue” within its network, causing disruption to grocery delivery through its app.

French Government and Investigations

A source close to French Prime Minister Sebastien Lecornu confirmed that France’s cybersecurity agency identified a vulnerability in software supplied by the Danish company. The agency is coordinating with European counterparts, assessing potential impacts on other countries, and alerting involved French companies to prevent further spread.

The Paris prosecutor’s office opened an investigation to identify affected victims and establish links between reported food losses and fires.

Broader Implications of Cyberattacks

This cyberattack highlights escalating concerns over the damage malicious cyber actors could inflict across various sectors in Europe. French President Emmanuel Macron recently mandated measures to safeguard France’s critical infrastructure from potential hybrid attacks, particularly from Russia.

Cybersecurity consultant Antoine Hautin noted that the attack likely affected hundreds of refrigeration units simultaneously. It demonstrated a high level of sophistication, especially with industrial equipment now often connected through sensors or remote monitoring features.