Attackers took control of internet-connected refrigeration controllers in about 700 French supermarkets, forcing long defrost cycles and pushing temperatures as high as 50°C. France’s finance minister Roland Lescure said the attack “touches the heart of our food security”, and the Paris prosecutor’s cybercrime unit has opened an investigation.
What happened
- Over the weekend of 10 and 11 October, settings on refrigeration controllers were changed remotely, apparently by automated tools. Food worth millions of euros was thrown away, and fires were reported in some stores.
- Intermarché and Netto (about 300 stores), Coopérative U (80 stores), Carrefour, Monoprix, and E.Leclerc were among the retailers affected.
- CERT-FR issued an alert on 12 October naming Danfoss AK-SC and AK-SM controllers, and extended it to Copeland and Dixell systems on 13 October. Many affected units were older, end-of-life models.
- No one has claimed responsibility, and no ransom demand or data theft has been reported.
Why it mattered
It was a destructive attack with physical consequences on food retail at national scale, carried out through ageing devices left reachable from the internet.
Lessons for organisations
Find and remove internet exposure on building, refrigeration, and other operational technology controllers, allow remote access only through a VPN, and replace end-of-life devices. Independent temperature alarms help spot tampering quickly.
Source: Associated Press
Part of our Top stories archive of headline-making events in information security, privacy, and AI. If you would like help applying the lessons to your organisation, contact us.
