Coordinated Cyberattack Forces Defrosting of Fridges in Hundreds of French Supermarkets

Key points

• Intermarché reported 150-200 stores affected, while Coopérative U confirmed nearly 100 locations were targeted.
• Carrefour stated 80 of its 6,000 stores were hit, with the majority remaining unaffected.
• Refrigeration units were remotely forced to defrost, with some reaching temperatures of 50°C (120°F) overnight.
• Paris prosecutors opened an investigation into the 'large-scale cyberattack' and linked it to fire outbreaks.
• Coopérative U CEO Dominique Schelcher described the attack as 'unprecedented' and 'unacceptable' due to its impact on food preservation.

Background

This incident follows a broader trend of cyberattacks targeting critical infrastructure in Europe, including recent concerns over Russian hybrid attacks and Iranian hackers targeting U.S. systems. France has recently ordered measures to protect critical infrastructure, reflecting growing fears about the weaponization of food supply chains.

How outlets are covering it

France 24 and BBC emphasize the scale of the attack and the immediate financial and food safety consequences, noting that Intermarché discarded all affected products. Tom's Hardware highlights the technical mechanism, describing how hackers activated automatic defrosting systems. While France 24 and BBC focus on the confirmed victims and the 'unprecedented' nature of the attack, Tom's Hardware notes potential impacts on delivery and store prices, though it does not provide specific figures. All sources agree on the severity but differ in the depth of technical detail provided.

Why it matters

The attack highlights vulnerabilities in critical infrastructure, specifically the food supply chain, and underscores the potential for cyberattacks to cause real-world physical damage and economic loss. It may prompt stricter regulations and security measures for retail and food distribution systems in Europe.

What to watch

Investigations by Paris prosecutors will likely determine the perpetrators and the extent of the damage. Supermarket chains will need to assess insurance coverage for the losses, as Intermarché warned that standard policies may not cover such incidents. The incident may also lead to increased scrutiny of cybersecurity in the retail sector.