Hackers accessed the refrigeration systems of hundreds of French supermarkets on the night of October 8, 2026, leading to the disposal of meat, frozen goods, and vegetables. Approximately 150 Intermarché stores were affected, according to a spokesman for the owner, Groupement Mousquetaires, as reported by Bloomberg. The attackers set the cooling systems to defrost, causing temperatures to rise to 50°C for about six hours.
Super U and Leclerc supermarkets were also impacted. Dominique Schelcher, chief executive of Coopérative U, stated on X that fewer than 100 of its stores were affected, as reported by Agence France-Presse. Some Leclerc stores were also targeted, though the company did not immediately respond to Bloomberg's request for comment.
Mousquetaires indicated that the refrigeration systems were managed by Danfoss, a Danish refrigeration group, and stated that it is the supplier's responsibility to file a complaint with the authorities. In August, researchers from Claroty's Team82 identified vulnerabilities in Danfoss controllers used in supermarkets and cold storage facilities, including a hidden login that could allow an attacker admin access. Team82 noted that Danfoss had released a firmware fix for these issues and found thousands of the controllers accessible from the internet. It remains unclear if these vulnerabilities were exploited in the recent attack, and neither the retailers nor Danfoss have disclosed how the attackers gained access. This incident is part of a trend of attacks that disrupt operations rather than focus on data theft, similar to the JLR hack and the Boston Scientific breach, which both halted physical production and shipping.