Cyberattack Forces French Supermarket Fridges to 50C, Sparking Fires and Massive Food Losses

Key points

• Hackers remotely triggered forced defrosting in refrigeration units across several major French retail chains, causing temperatures to spike to 50C for up to six hours.
• The attack resulted in fires and the disposal of millions of euros worth of fresh and frozen food to mitigate health risks, with two stores in Alsace alone reporting losses of €270,000.
• French cybersecurity agency ANSSI identified a vulnerability in legacy software supplied by Danish company Danfoss, specifically affecting older models like the AK-SM800 that no longer receive security updates.
• The incident prompted a coordinated response, with French Prime Minister Sébastien Lecornu instructing ANSSI to investigate and coordinate with European counterparts, as similar security issues were reported by Dutch retailer Ahold Delhaize.
• EU Food Commissioner Christophe Hansen condemned the attack, stating that the weaponization of food supply chains has become a reality and requires increased attention at all levels.

Background

This incident follows a period of heightened concern regarding cyber threats to critical infrastructure in Europe. In September 2026, French President Emmanuel Macron ordered measures to protect critical infrastructure from Russian hybrid attacks. The current attack highlights the growing vulnerability of industrial equipment, such as refrigeration units, which are increasingly connected to the internet via sensors and remote monitoring systems, making them susceptible to sophisticated cyber operations.

How outlets are covering it

The Guardian and CBS News emphasize the unprecedented nature of the attack and the immediate physical consequences, including fires and food spoilage. The BBC provides additional detail on the financial impact, noting that the nationwide total could run into the millions, and highlights the specific vulnerability in Danfoss's legacy systems. All three outlets agree on the scale of the disruption but differ in their emphasis: The Guardian focuses on the political response and European coordination, the BBC on the financial losses and specific retailer impacts, and CBS News on the technical details of the attack and the broader implications for food security. There is no direct disagreement on the facts, but the framing varies from a national security perspective to a consumer and economic one.

Why it matters

This attack demonstrates the tangible risks of cyber threats to essential services and food supply chains. It underscores the need for robust cybersecurity measures in industrial equipment and the potential for such attacks to cause widespread economic and social disruption. The incident also highlights the importance of international cooperation in addressing cyber threats that can cross borders, as seen with the similar issues reported in the Netherlands.

What to watch

ANSSI is expected to continue its investigation to identify other potentially affected French companies and to prevent the spread of the attack. Danfoss is likely to issue further guidance on updating legacy systems, and European authorities may implement stricter cybersecurity standards for critical infrastructure. The full financial impact and the identity of the attackers remain to be determined.