France’s Supermarkets Under Cyberattack as Hackers Remotely Destroy Frozen Food and Damage Stores

A massive cyberattack targeting supermarket refrigeration systems across France has left hundreds of stores dealing with spoiled food, damaged equipment and reported fires. The coordinated disruption began overnight between October 11 and 12, 2026, affecting major grocery chains including Intermarché, Carrefour, Coopérative U and Monoprix, prompting a nationwide investigation into the unprecedented digital sabotage.

The attackers remotely manipulated electronic refrigeration controls, reportedly raising temperatures inside some commercial systems to 50 degrees Celsius (122 degrees Fahrenheit). Equipment designed to preserve frozen and refrigerated food was instead forced into prolonged heating cycles. The resulting temperature increases rendered products unsafe for consumption and caused extensive disruption to supermarket operations across France.

French media reports suggested approximately 700 supermarkets may have been affected, although authorities have not established a definitive total. The Paris prosecutor’s office described a large-scale cyberattack targeting connected refrigeration equipment across major food retailers. The incident affected multiple supermarket chains and prompted French officials to investigate how attackers gained access to essential commercial systems.

Investigators believe attackers exploited remotely accessible refrigeration controls by manipulating automatic defrosting functions. These systems normally activate briefly to prevent ice accumulation around cooling components. However, some defrost cycles were reportedly extended from approximately one hour to eight hours, preventing refrigerators from returning to safe temperatures and allowing large quantities of perishable merchandise to deteriorate.

At an Intermarché supermarket in Gradignan, near Bordeaux, owner Charles Dezon reported that overheating refrigeration equipment triggered a fire suppression system, flooding part of the store. Elsewhere, employees discovered thawed frozen meals, spoiled meat and damaged dairy products. Supermarkets were forced to discard affected inventory while assessing damage to their equipment and facilities.

Les Mousquetaires, which operates Intermarché, reported approximately 150 affected stores, while Carrefour identified around 80 impacted locations. Employees discarded compromised products to prevent potential food safety risks. Intermarché president Thierry Cotillard estimated that the disruption could generate tens of millions of euros in losses nationwide, reflecting destroyed merchandise, equipment repairs and interrupted business operations.

The cyberattack exposed vulnerabilities involving internet-connected refrigeration technology, including systems manufactured by Danish company Danfoss. According to CNN, more than 1,700 instances of affected Danfoss software were publicly accessible online in France. Cybersecurity researchers had previously identified weaknesses affecting some refrigeration controllers, raising concerns about outdated equipment and insufficient protection against unauthorized remote access.

Danfoss acknowledged that older refrigeration systems could be particularly vulnerable when operating without current security protections. The manufacturer said it had «long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions.» Equipment associated with Copeland and its Dixell brand was also reportedly targeted.

Prime Minister Sébastien Lecornu directed France’s cybersecurity agency, ANSSI, to investigate the attacks, while the Paris prosecutor’s cybercrime unit opened a criminal inquiry. Economy Minister Roland Lescure warned that the disruption threatened essential food distribution systems. «When we discovered this cyberattack, it worried us about the ability of our distribution chains to properly deliver food to all our fellow citizens.»

The incident followed earlier warnings from President Emmanuel Macron about escalating cyber threats to French infrastructure. In September, Macron referred to the «Russian hybrid threat facing Europeans and France,» describing a danger that had «intensified» in recent weeks. However, French investigators have not identified those responsible for the supermarket attacks or established any Russian involvement.

Similar refrigeration disruptions have reportedly affected retailers in Spain, Portugal, Poland, Germany and Belgium, raising concerns about vulnerabilities across Europe’s food distribution networks. European Agriculture Commissioner Christophe Hansen warned, «The weaponization of food has become a reality.» Although France’s overall food supply remains available, the attacks demonstrate how compromised connected equipment can cause widespread physical and economic damage.