French Supermarkets Hit by Cyberattack Affecting Refrigeration Systems

On Monday, major French supermarket chains reported a cyberattack impacting refrigeration systems across hundreds of stores. This breach led to an increase in refrigerator temperatures, causing food spoilage and raising concerns about food security.

Retail giants E. Leclerc, Intermarché, and Cooperative U confirmed the attack. Cooperative U’s CEO described the incident as unprecedented in severity. EU’s Commissioner for Food and Agriculture, Christophe Hansen, condemned the attack on X, emphasizing the exploitation of food as a growing concern.

Affected stores included at least 300 Intermarché or Netto outlets, over 100 Cooperative U locations, and several E. Leclerc stores. Dominique Schelcher, CEO of Cooperative U, expressed grave concern, stating the attack on essential equipment compromised fresh product preservation and the food supply for the French people.

Paris prosecutors confirmed the attack, which reportedly caused fires in addition to food spoilage. BFM TV reported hackers forced fridge defrosting remotely, aggravating losses of fresh and frozen goods. Intermarché stated all such products would have to be discarded.

Carrefour disclosed that 80 of its stores were affected, although most of its 6,000 locations remained unimpacted. E. Leclerc noted the issue was rooted in a refrigeration equipment supplier’s cyber vulnerabilities, disrupting refrigeration systems operation.

Danish manufacturer Danfoss identified legacy systems as the primary target. These systems no longer receive updates. They affected specific control systems using outdated firmware. Danfoss had previously advised grocery chains to upgrade their equipment.

Ahold Delhaize, operating in both Europe and the U.S., reported a security issue. They faced disruptions in grocery delivery due to the cybersecurity incident.

Large-scale Cyberattack Investigation

A vulnerability in software from a Danish firm was recognized by France’s cybersecurity agency. It has communicated with the vendor and European counterparts to prevent further impact. An investigation by the Paris prosecutor aims to assess the scope of the damage, food losses, and any fires.

Intermarché condemned the ensuing food waste and financial repercussions. Temperatures altered remotely led to destruction of fresh and frozen inventories, according to BFM TV.

The event highlights rising fears of hybrid attacks. With industrial equipment now connected via sensors and remote systems, cybersecurity risks are amplified. The attack demonstrated substantial sophistication by concurrently affecting numerous units.

President Emmanuel Macron recently implemented measures to safeguard France’s critical infrastructure against potential Russian-enabled hybrid attacks. This underscores heightened apprehension over cyber threats across various sectors in Europe.