A Coordinated Sabotage of the Food Chain
In an unprecedented breach of retail infrastructure, hundreds of French supermarkets were crippled over the weekend by a targeted cyberattack. Major retailers including Intermarché, E. Leclerc, and Coopérative U reported that their refrigeration and freezer systems were remotely compromised, leading to a massive loss of inventory. The incident, which began on Sunday, October 11, 2026, saw systems manipulated into a continuous defrost mode, causing temperatures in some units to spike as high as 50 degrees Celsius.

The Mechanics of the Attack
Preliminary investigations suggest that the attackers bypassed standard security to access refrigeration control systems manufactured by the Danish firm Danfoss. By forcing these units into an aggressive, non-stop defrost cycle over a period of roughly six hours, the hackers were able to ensure the rapid spoilage of fresh meat, produce, and frozen goods.
- Affected retailers included Intermarché, E. Leclerc, and Coopérative U.
- System manipulation caused temperatures to reach 50°C, triggering some localized fires.
- The attack targeted the centralized control software used to manage store-wide refrigeration.
- French authorities are currently investigating the breach, with potential ties to similar disruptions in the Netherlands and Belgium.
Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is extremely serious and is unprecedented. It is unacceptable.
— Dominique Schelcher, Chief Executive of Coopérative U
A Warning for the Internet of Things (IoT)
While the immediate impact is the loss of tons of food, the incident serves as a grim case study for the risks inherent in the 'Internet of Things' (IoT). Cybersecurity analysts note that many legacy commercial systems remain connected to the internet using outdated software that no longer receives security patches. This event highlights how easily vulnerabilities in connected infrastructure—from heating and cooling to energy grids—can be weaponized to cause real-world physical damage, far beyond the digital realm.
