Hundreds Of French Supermarkets Hacked In 'Unprecedented' Cyberattack
"Ingar" writes:
Major French Supermarket Chains Hit by Cyber:
Several chains of supermarkets in France have reportedly been hit by a cyber-attack targeting the refrigeration facilities of several stores across the country.
One of the affected companies is Cooperative U, a retail cooperative encompassing supermarkets branded as Hyper U, Super U, U Express and Utile.
In a post on X published on October 12, Dominique Schelcher, CEO of Cooperative U, confirmed the cyber-attack affected several stores in the network from October 11.
"Our teams are fully mobilized, in coordination with refrigeration specialists, to restore the situation as quickly as possible. An investigation will be needed to shed full light on this attack," he said.
He also highlighted that refrigeration systems are "essential to preserving fresh products and supplying food to the French public" and said this attack is "of utmost gravity, unprecedented [and] unacceptable."
French news channel BFMTV reported that the compromised systems are administered by Danish refrigeration systems provider Danfoss.
The media outlet reported the attackers targeted outdated versions of the manufacturer's refrigeration control software.
"Hackers reportedly managed to remotely trigger forced defrost cycles in refrigeration systems at numerous supermarkets, with temperatures programmed to reach as high as 50 C (122F)," BFTV reported .
BFTV reported that two supermarkets alone, an Intermarche and Super U, already recorded losses of 270,000 ($302,000) worth of merchandise in Haguenau, in the Alsace region, as a result of the incident.
The media outlet assessed that 150 of Intermarche stores, part of Groupe Mousquetaire, are affected.
Other reportedly affected supermarket networks include some of the major retail chains in the country, such as E. Leclerc, Carrefour and Monoprix, Jonathan Le Borgne, author of the specialized retail news website Je bosse en grande distribution, has reported .
Danfoss products have been found to contain critical cybersecurity vulnerabilities in the past, such as CVE-2023-25915, CVE-2025-41450, CVE-2025-41451 and CVE-2025-41452, some of which could allow attackers to gain privileged access to refrigeration control systems and manipulate physical equipment.
Additionally, research presented by Claroty's Team82 at DEF CON 34 in August 2026 demonstrated how a compromised AK-SM 800A controller could disable cooling while falsifying temperature readings, potentially concealing failures in the cold chain. These findings highlight the real-world risks of exposing industrial refrigeration systems to the public internet without adequate security controls, authentication, and firmware updates.
On October 13, the Danish company will be at Chillventa in Nuremberg, a three-day trade fair for refrigeration technology, where it is planning to showcase the new iC7-HVACR drive featuring "integrated cybersecurity features."
Read more of this story at SoylentNews.