Hackers Raise Fridge Temperatures Across 400 French Supermarkets

A coordinated cyber attack struck roughly 400 French supermarkets in October 2026, forcing commercial freezers to 50 degrees Celsius overnight and destroying tens of millions of euros in refrigerated stock.

The breach hit stores operated by Intermarché Coopérative U, Carrefour, Monoprix, and E.Leclerc, causing immediate inventory write-offs across fresh food and frozen aisles.

How Hackers Infiltrated Cooling Controls

Intruders targeted centralised refrigeration software supplied by Danish engineering group Danfoss, which enables remote monitoring and automatic temperature regulation across commercial networks. Rather than breaching individual retail units on site, attackers exploited outdated firmware to alter master temperature settings across hundreds of stores simultaneously.

Les Mousquetaires, parent company of Intermarché and Netto, confirmed that cooling units across approximately 150 of its outlets were heated to 50 degrees Celsius for six consecutive hours. The chain disconnected another 100 stores from the network during the incident to prevent further damage. Carrefour reported compromised systems across 80 stores, while Monoprix lost inventory across 5 per cent of its locations.

Supply Chain Exposure Across Asia-Pacific

For supermarket operators across Australia and the wider Asia-Pacific region, the incident shifts operational technology from backroom maintenance into board-level risk. Australian grocers manage thousands of distributed stores using identical internet-facing refrigeration and building management systems to cut energy costs and meet emissions targets.

Retailers in the region carry heavy exposure when third-party maintenance contractors retain direct administrative access to store controllers. An intrusion into a corporate facility network or a shared vendor management platform bypasses store-level alarms and ruins cold-chain compliance before morning shift managers enter the building.

Legacy Systems and Unpatched Firmware

The technical fault line sits in legacy hardware that operators rarely replace during routine store refurbishments. Danfoss stated that the compromised units in France ran outdated firmware that could not support current defensive updates. The manufacturer maintains that it has long advised commercial clients to update supported hardware and migrate obsolete systems.

Cybersecurity researchers at Claroty documented critical flaws in the Danfoss AK-SM 800A controller in August, showing that attackers could bypass authentication protocols to execute remote code. Danfoss issued software patches following that disclosure, but independent franchise operators and decentralized supermarket networks frequently lag in deploying updates across thousands of field devices.

Investigations Open as Retailers Audit Assets

French prosecutors and national cybersecurity agency ANSSI have opened a formal investigation into the breach, treating the incident as a coordinated assault on commercial food infrastructure. Retailers across Australia and Asia-Pacific must now verify whether local cold-chain assets run unpatched Danfoss controllers or unprotected vendor links before investigators publish the final incident report.