Cyber attacks on hundreds of supermarkets in France on Monday resulted in the destruction of perishable goods. Hackers controlled refrigeration systems in major chains such as Cooperative U, Leclerc, Les Mousquetaires, and Intermarche, causing thousands of freezer and refrigeration units to melt.
Details of the Cyber Attack
During this overnight attack, in some cases, refrigerators filled with goods were heated to 50 degrees Celsius for over six hours. According to reports, more than 400 stores were affected by these attacks. Paris prosecutors confirmed the attacks and stated that some locations also reported fires.
Response from Supermarket Chains
The Intermarche chain announced that affected stores had no choice but to "discard all fresh and frozen products." Additionally, Leclerc told Agence France-Presse that "a cyber attack has impacted one of its refrigeration equipment suppliers," leading to "consequences for the operation of refrigeration systems in several stores."
The targeted refrigeration systems belonged to the Danish supplier Danfoss. Prime Minister Sébastien Lecornu confirmed this and stated that "a vulnerability in the software provided by a Danish company has been identified" and that contact has been made with this supplier.
Cybersecurity Measures
Danfoss stated that it is "aware of incidents in France that have affected a limited number of refrigeration management systems" and added that the units in question "were operating with outdated software." The company also emphasized that it has "long advised customers to update their systems with the latest software version."
Prime Minister Lecornu's office has tasked the French Cybersecurity Agency (ANSSI) with investigating this attack and has engaged in "cooperation with its European counterparts," as other countries may also have been affected.
Global Concerns
Security issues have also been reported in Belgium, Luxembourg, and the Netherlands. The Dutch supermarket chain Ahold Delhaize announced that it has shut down its refrigeration systems to protect them, although the company added that it sees no connection to the attacks in France.
It is still unclear who may be responsible for this cyber attack, and no group or individual has yet claimed responsibility. This incident occurred amid growing concerns about vulnerabilities related to industrial ransomware and cyber attacks, as well as heightened sensitivity to hybrid attacks from Russia amid rising tensions in the Ukraine war.
Emphasis on Food Security
The CEO of Cooperative U, Dominique Schelcher, wrote in a post on social media X: "Targeting equipment essential for preserving fresh products and supplying food to the people of France is very serious and unprecedented. This is unacceptable." The European Union's Commissioner for Food and Agriculture, Christoph Hansen, also condemned the attack in a post, adding that "food exploitation" is now a "reality."
