French Cyberattack Forces Supermarket Fridges to 50C, Wiping Out Millions in Food

Key points

• Hackers targeted refrigeration software, forcing fridges in Intermarché and Coopérative U stores to heat up to 50C overnight.
• The Paris prosecutor's office opened an investigation into the 'large-scale' attack, which caused food losses and fire outbreaks.
• Prime Minister Sebastien Lecornu ordered the National Cybersecurity Agency (ANSSI) to investigate the incident.
• Danish company Danfoss identified a vulnerability in outdated firmware used by affected refrigeration management systems.
• Dutch retailer Ahold Delhaize reported a separate security issue, though a direct link to the French attack is unconfirmed.

Background

This incident follows a pattern of increasing cyber threats against critical infrastructure in Europe. Earlier this year, similar attacks disrupted hospital systems in the US, highlighting the vulnerability of essential services to digital disruptions. The current attack underscores growing concerns about the weaponization of food supply chains and the risks associated with legacy software in industrial control systems.

How outlets are covering it

Euronews and BBC emphasize the scale of the attack, with BBC noting that fridges heated to 50C for six hours, causing massive food waste. KSL highlights the technical aspect, pointing to a vulnerability in Danfoss software and the involvement of ANSSI. While Euronews and BBC focus on the immediate impact on French retailers, KSL notes the potential broader implications for European supply chains, including issues in the Netherlands. All sources agree on the severity of the incident but differ in their emphasis on the technical cause versus the economic impact.

Why it matters

The attack demonstrates the critical vulnerability of food supply chains to cyber threats, potentially leading to widespread food shortages and economic losses. It also highlights the need for updated software and stronger cybersecurity measures in critical infrastructure, as outdated systems can be easily exploited by malicious actors.

What to watch

ANSSI will continue its investigation to determine the full scope of the attack and identify any other affected systems. Danfoss is likely to issue patches for the vulnerable firmware, and French retailers will assess the financial impact and insurance coverage for the losses. The incident may lead to increased scrutiny of cybersecurity practices in the retail and food supply sectors across Europe.