Hackers disabled the refrigeration systems in between 150 and 200 French supermarkets on Sunday night, raising temperatures inside display cases and freezers to 50 degrees Celsius and forcing merchants to discard ruined food stocks, according to reports by nos.nl and nrc.nl. The coordinated cyberattack struck locations operated by chains including Intermarché, E.Leclerc, Netto, and Coopérative U, exploiting outdated software vulnerabilities in refrigeration units manufactured by the Danish company Danfoss. The incident unfolded overnight, leaving store operators to discover spoiled inventory when doors opened on Monday morning.
Financial Damage and Scale of the French Supermarket Hack
Financial losses across France are projected to reach millions of euros as thousands of products thaw and perish. Individual store operators report severe local impacts; for example, a single shop owner in the Alsace region estimates losses at 220,000 euros, while retail data cited by RetailTrends puts combined damage for two regional outlets at 275,000 euros. Coopérative U chief executive Dominique Schelcher posted on X that targeting equipment essential for preserving fresh products and feeding the French public is unprecedented and unacceptable, confirming that local technical teams and refrigeration engineers are working to restore normal operations.
The cyber intrusion capitalized on security flaws in older Danfoss software versions. These specific software vulnerabilities had reportedly surfaced during the summer months but remained unpatched before hackers seized remote control of the hardware. The French National Cybersecurity Agency has established contact with the software supplier to investigate the breach and determine whether additional commercial entities across the country were compromised.
Parallel IT Failures at Ahold Delhaize Brands in the Netherlands and Belgium
The disruption in France coincided with a separate cybersecurity incident affecting retail systems at Ahold Delhaize in the Netherlands and Belgium, which impacted supermarkets under the Albert Heijn banner alongside drugstore chain Etos and liquor retailer Gall & Gall. Unlike the hardware heating attack observed in France, the Dutch operational disruption targeted electronic shelf price tags and crippled back-end IT infrastructure. Albert Heijn disconnected parts of its digital network as a precautionary security measure, leaving online grocery delivery services offline, mobile applications largely inaccessible, and pricing displays in physical stores inaccurate.
While industry watchers draw parallels between the multi-country technical failures, authorities have not yet confirmed whether the French refrigeration hack and the Dutch IT disruptions share a common orchestrator. Previous international incidents, such as an unexplained simultaneous outage affecting military base supermarkets across the United States in August, share similarities with remote refrigeration shutdowns, though concrete attribution remains absent.
Frequently Asked Questions About the Supermarket Cyberattacks
Which supermarket chains suffered compromised refrigeration units in France?
Locations belonging to Coopérative U, Intermarché, Netto, and E.Leclerc were among the targets identified by nos.nl and RetailTrends, with between 150 and 200 total stores sustaining disabled cooling equipment.
What specific hardware and software vulnerabilities did the hackers exploit?
The intrusions targeted older software versions running on refrigeration machinery manufactured by the Danish firm Danfoss, exploiting known vulnerabilities that operators failed to patch prior to the attacks.
How does the Dutch cybersecurity incident differ from the French refrigeration attack?
The disruption at Albert Heijn, Etos, and Gall & Gall in the Netherlands involved IT systems, electronic shelf labels, and online delivery platforms rather than the physical overheating of cooling units seen in French stores.