Danfoss Software Flaw Triggers Massive Cyberattack on European Supermarket Fridges

Key points

• Hackers remotely triggered defrost cycles in refrigeration units, raising temperatures to 50°C and causing fires in some stores.
• The attack affected major French chains including Intermarché, Coopérative U, Carrefour, and Monoprix, with Intermarché CEO estimating losses in the tens of millions of euros.
• France’s National Cybersecurity Agency (ANSSI) identified the vulnerability in software supplied by Danish company Danfoss, which claimed affected units were running outdated firmware.
• European Commissioner Christophe Hansen condemned the attack, stating that the 'weaponization of food has become a reality.'
• The incident is part of a broader wave of AI-enhanced cyberattacks, with similar disruptions reported in the Netherlands and other European countries.

Background

This incident follows a pattern of increasing cyber threats targeting critical infrastructure. Earlier coverage noted that similar disruptions occurred at US military commissaries in August 2026, and a UK power plant was shut down in July due to a suspected Iran-linked attack. Experts have warned that AI is increasing the scale and speed of such cybercrimes, making legacy systems vulnerable to remote exploitation.

How outlets are covering it

While all sources agree on the scale and impact of the attack, they differ on the attribution and response. CNBC and NBC News emphasize the financial losses and the involvement of major retailers, with Intermarché CEO Thierry Cotillard citing 'tens of millions of euros' in losses. Le Monde provides a more granular technical account, noting that hackers extended defrost cycles to eight hours to delay alarms, and that some equipment melted at 80°C. Al Jazeera highlights the broader implications, with cybersecurity analyst Steven Lachance warning that future attacks could target energy or hospital infrastructure. Danfoss, the software provider, downplayed the incident, stating that affected units were running outdated firmware and that they had long advised customers to update their systems. French authorities, including Prime Minister Sebastien Lecornu, have ordered a national investigation, while European officials have called for greater resilience in supply chains.

Why it matters

This attack underscores the growing vulnerability of critical infrastructure to cyber threats, particularly in the food supply chain. The incident highlights the risks of relying on legacy software and the potential for cyberattacks to cause physical damage and economic loss. It also raises concerns about the weaponization of food, as European officials have warned, and the need for stronger cybersecurity measures across industries.

What to watch

French authorities are investigating the attack, and Danfoss is expected to provide more transparency on the vulnerability. Retailers are working to restore normal operations and assess the full extent of the damage. The incident may lead to increased scrutiny of cybersecurity practices in the retail and food industries, as well as calls for stronger international cooperation to prevent similar attacks.