Hacker Attack Disrupts French Supermarkets, Causing Widespread Food Losses
In a significant and alarming incident, hundreds of French supermarkets faced substantial refrigeration disruptions after hackers reportedly infiltrated their control systems, resulting in the devastating loss of fresh and frozen food items. Major supermarket chains such as Intermarché, Netto, Coopérative U, and Leclerc were among those impacted, with preliminary estimates suggesting potential nationwide losses could reach several million euros, as reported by BFMTV.
The assault specifically targeted refrigeration systems manufactured by Danfoss, a Danish company known for its freezing and cooling solutions. The repercussions of this cyberattack were considerable, with Les Mousquetaires confirming that approximately 300 Intermarché and Netto outlets were affected—a stark increase from the initial estimate of 150 stores. Additionally, Coopérative U reported disruptions at fewer than 100 of its locations, while the impact on Leclerc stores remains unspecified. This lack of clear information complicates efforts to calculate a total number of affected establishments across the nation.
Understanding the Attack on Refrigeration Systems
According to industry experts cited by BFMTV, the hackers utilized older versions of Danfoss control software, particularly those released prior to version 4, in their assault on the systems. By exploiting the refrigeration units’ automatic defrost function, the attackers transformed a routine maintenance process into a prolonged heating cycle. Typically, defrost cycles are designed to eliminate built-up frost and run for about two hours within a 24-hour period. However, during this cyber intrusion, the attackers reportedly caused continuous defrosting and set the temperature to a staggering 50°C. It is important to note that this temperature setting reflects the hackers’ input rather than the confirmed temperature achieved in every affected refrigerator.
Imagery shared by BFMTV captured the dire state of an ice cream aisle, where temperatures reached 26°C. Industry sources described a “wave of heat” when staff opened the refrigeration units, indicating the severity of the situation.
This method highlights a concerning trend in cyberattacks: rather than focusing solely on business applications, unauthorized manipulations of operational technology lead to real-world consequences, in this case, endangering food preservation. However, the report did not specify the exact vulnerability exploited, the model of the controllers used, or how the hackers initially accessed the systems. The mere reference to outdated software versions does not confirm that the newer iterations are immune from similar attacks either.
Impact and Immediate Responses
Some of the attacks reportedly began around midnight, which allowed the refrigeration units to operate unchecked for several hours before staff arrived to identify and address the issues. In Haguenau, an Intermarché likely suffered a complete loss of its frozen inventory, with damages said to be around €50,000. Similarly, a Leclerc store in Wasselonne was forced to discard both frozen and fresh goods, estimating its losses at approximately €220,000. Another Leclerc outlet in Haguenau was also impacted but had yet to determine its financial losses.
The damages experienced by these supermarkets stress the need for robust cybersecurity measures, especially for systems managing essential services like refrigeration. Reports highlight that affected stores acted promptly to prevent further losses by quickly removing products from compromised equipment. On October 12, an internal communication issued by Les Mousquetaires outlined the potential for significant losses in frozen items and urged exceptional handling for replenishment orders to mitigate the fallout.
Coopérative U took proactive measures, establishing crisis units in conjunction with refrigeration specialists to provide support to affected stores. Meanwhile, a meeting was scheduled between Danfoss and the refrigeration installation and maintenance provider Axima for the following Monday to discuss recovery efforts.
The leadership at Coopérative U described the attacks on critical refrigeration equipment as “extremely serious, unprecedented, and unacceptable.” This incident reveals a concerning shift in the nature of cyberattacks, where targeted manipulations can have devastating consequences.
Conclusion
The ramifications of this cyber incident extend far beyond simple disruptions to checkout or ordering systems. The manipulation of refrigeration controls poses a direct threat to stock preservation, necessitating the disposal of perishable items while retailers simultaneously work to recover and replace damaged equipment. As businesses grapple with the fallout, the incident serves as a stark reminder of the urgent need to bolster defenses against ever-evolving cyber threats, particularly in sectors essential for public health and safety.