Danfoss Vulnerability Sparks Cross-Border Cyberattack on European Supermarket Fridges

Key points

• Hackers remotely triggered defrosting cycles in refrigerators at hundreds of French stores, raising temperatures to 50°C (122°F) overnight.
• Major chains including Intermarché, Carrefour, Monoprix, and Cooperative U reported significant food losses and fire incidents.
• France’s National Cybersecurity Agency (ANSSI) identified the attack as exploiting a vulnerability in software supplied by Danish company Danfoss.
• The attack affected multiple European countries, including Spain, Portugal, Poland, Germany, and Belgium, according to cybersecurity analysts.
• Industry-wide losses are estimated in the tens of millions of euros, with some stores facing up to €200,000 in damages.

Background

This incident follows earlier reports of similar disruptions at U.S. military commissaries in late August 2026. Cybersecurity firm Claroty had published research on August 9, 2026, detailing vulnerabilities in Danfoss controllers that could allow attackers to bypass authentication. The current attack highlights ongoing concerns about the security of internet-connected industrial equipment in critical infrastructure.

How outlets are covering it

While all sources confirm the scale of the attack, they differ in emphasis. NBC News and Al Jazeera focus on the immediate impact on French retailers and the role of Danfoss’s outdated firmware. CNBC highlights the broader European context, noting that Ahold Delhaize’s Albert Heijn chain in the Netherlands also experienced a 'security issue,' though it denied a direct link to the French attack. The Times of India emphasizes the financial and insurance implications for retailers, while Al Jazeera includes warnings from cybersecurity analysts about potential future targets like energy infrastructure and hospitals. European Commissioner Christophe Hansen condemned the attack as 'weaponization of food,' underscoring the political and food security dimensions.

Why it matters

This attack exposes critical vulnerabilities in the supply chain for essential goods, demonstrating how cyber threats can directly impact food availability and public safety. It underscores the need for updated security protocols in industrial equipment and coordinated international responses to cyber threats targeting critical infrastructure.

What to watch

Authorities are investigating the extent of the damage and identifying affected businesses. Retailers are working to restore normal operations, while Danfoss is urged to provide full transparency. European counterparts are coordinating to assess risks to other countries, and cybersecurity experts are calling for national and international measures to prevent similar attacks on critical infrastructure.