French Supermarket Cyberattacks Expand to Dixell Systems After Danfoss Breach

Key points

• Monday night's attack targeted Dixell refrigeration equipment, mirroring the previous day's Danfoss breach.
• The attack involved automated changes to defrost and temperature settings, with hackers altering two to three settings per second.
• A refrigeration specialist in Bordeaux detected the anomaly at 4 am and thwarted the attack, preventing food waste.
• The initial Danfoss attack affected over 400 supermarkets, including Intermarché, Netto, Coopérative U, and Monoprix.
• French Finance Minister Roland Lescure stated that about 700 of France's 10,000 supermarkets were affected by the initial attack.

Background

The current attacks follow a major cyberattack on October 12, 2026, which targeted Danfoss refrigeration systems in over 400 French supermarkets. This initial breach caused temperatures to spike to 50°C (122°F), spoiling food and sparking fires. The incident was linked to legacy software from Danish firm Danfoss, which had a known vulnerability disclosed in August 2026. European officials, including Agriculture Commissioner Christophe Hansen, warned that the 'weaponization of food' had become a reality. The attacks affected major chains including Carrefour, Intermarché, and Coopérative U, with estimated losses exceeding €10 million.

How outlets are covering it

Le Monde reported that the Monday night attack targeted Dixell systems, mirroring the previous day's Danfoss breach, and highlighted the automated nature of the attack, with hackers changing settings at a speed no human could match. The New York Times noted that the initial attack affected over 400 supermarkets, including 300 from Intermarché and Netto, 80 from Coopérative U, and 30 from Monoprix, and that no group had claimed responsibility. CBC emphasized the broader implications for connected devices, with cybersecurity experts warning that the attack is a 'wake-up call' about the vulnerabilities of digitized systems. CNBC highlighted the international scope, noting that the attack affected several European countries, including Spain, Portugal, Poland, Germany, and Belgium, and that Dutch supermarket giant Ahold Delhaize was also experiencing a security issue, though it was not believed to be linked to the French hack.

Why it matters

The expansion of the cyberattacks to Dixell systems demonstrates the ongoing threat to critical infrastructure, particularly in the food supply chain. The automated nature of the attacks, with hackers changing settings at a speed no human could match, highlights the sophistication of the attackers and the need for robust cybersecurity measures. The incident has raised concerns about the security of connected devices and the potential for further attacks on critical infrastructure. French authorities are investigating the attacks, and the incident has prompted a broader discussion about the need for continuous investment in cybersecurity to protect against such threats.

What to watch

French authorities are expected to continue their investigation into the cyberattacks, with the Paris prosecutor's office cybercrime unit working to determine the extent of the damage and identify the culprits. The refrigeration specialist in Bordeaux has advised his customers to be extra vigilant after the previous day's attack on Danfoss systems. Cybersecurity experts are likely to continue warning about the vulnerabilities of connected devices and the need for continuous investment in cybersecurity. The incident may also prompt a broader discussion about the security of critical infrastructure and the potential for further attacks on the food supply chain.