Cyberattack shuts down refrigerators at French supermarkets

Attackers remotely compromised Danfoss refrigeration controllers running older versions of control software at multiple French supermarket chains. They exploited the built-in automatic defrosting system to raise refrigerator temperatures overnight, causing widespread disruption and food spoilage. The affected chains include Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, impacting 250 to 350 stores. The attack is unprecedented in targeting critical cold chain infrastructure essential for food preservation. Although the exact compromise method is unknown, a previously disclosed high-severity authentication bypass vulnerability (CVE-2025-41450) in Danfoss AK-SM 8xxA Series hardware may be relevant. French authorities have launched an investigation, and other retailers like Ahold Delhaize have reported related cybersecurity incidents.

The attack caused refrigerators to defrost remotely, leading to significant food spoilage and financial losses across hundreds of French supermarket stores. It disrupted the cold chain essential for preserving fresh produce and food supplies. The incident also prompted investigations by French authorities due to the scale and critical nature of the disruption. There is no confirmed evidence linking the attack to the known Danfoss vulnerability, but the incident highlights risks to industrial control systems in the food retail sector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Retailers should coordinate with Danfoss and refrigeration specialists to update and secure refrigeration controller software, especially older versions. Monitoring and restricting remote access to critical control systems is advised. Follow official investigations and vendor advisories for updates on patches or mitigations related to the Danfoss AK-SM 8xxA Series hardware platform.