A cyberattack targeting refrigeration equipment disrupted food storage at more than 400 supermarkets across France, forcing retailers to discard perishable goods after hackers manipulated cooling systems overnight.
The incident affected stores operated by Cooperative U, Leclerc, Les Mousquetaires and Intermarche, according to retailers and French prosecutors.
In some locations, fully stocked refrigerators were heated to 50 degrees Celsius (122 degrees Fahrenheit) for more than six hours, according to reported details of the attack.
The incident also prompted reports of fires at some locations, French prosecutors in Paris confirmed.
Intermarche said affected stores had no alternative but to discard their stock, stating they had to "throw away all fresh and frozen products."
Leclerc separately confirmed to French news agency AFP that the incident involved equipment provided by one of its refrigeration suppliers.
The company said a cyberattack affected the supplier and caused operational problems with refrigeration systems at several stores.
Investigation and Supplier Response
The French government is investigating a possible software vulnerability linked to the affected equipment, while authorities assess whether similar incidents could occur elsewhere in Europe.
Prime Minister Sebastien Lecornu's office reportedly identified "a vulnerability in software supplied by a Danish company and has contacted the vendor."
The office assigned France's cybersecurity agency, ANSSI, to investigate the attack and coordinate with European counterparts.
Danfoss, the Danish refrigeration equipment supplier reportedly associated with the affected systems, acknowledged incidents in France involving some refrigeration management equipment.
The company said the affected units were using outdated firmware.
Danfoss said it was "aware of incidents in France affecting a limited number of refrigeration management systems," adding that the units in question "were running outdated firmware."
The company said it had repeatedly advised customers to maintain supported systems and replace older technology with current-generation solutions.
Danfoss said it had "long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions."
Security concerns have also emerged in Belgium, Luxembourg and the Netherlands.
Dutch supermarket chain Ahold Delhaize said it had taken refrigeration systems offline as a precaution, although the company said it had found no connection between those concerns and the French attacks.
Authorities have not identified those responsible for the French incident, and no individual or group has claimed responsibility.
The attack comes amid broader concerns about vulnerabilities in industrial systems and cyber operations targeting essential infrastructure.
French President Emmanuel Macron ordered measures last month to protect the country's critical infrastructure against what his government described as hybrid attacks linked to the Kremlin, amid heightened tensions over Russia's war in Ukraine.
Dominique Schelcher, chief executive of Cooperative U, condemned the targeting of equipment essential to food preservation and supply in a statement posted on X.
"Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is extremely serious and is unprecedented.
It is unacceptable," said Dominique Schelcher, CEO of Cooperative U.
European Union Food and Agriculture Commissioner Christophe Hansen also condemned the incident in a post on X, calling for greater attention to food security.
"Food security requires more attention at all levels," wrote Christophe Hansen, who added that the "exploitation of food" is now a "reality."
