French Supermarket Cyberattack Exposes Critical Cold-Chain Vulnerabilities

A coordinated cyberattack on French supermarket chains in mid-October compromised refrigeration management systems, raising temperatures to dangerous levels (up to 50 degrees Celsius) and causing significant food spoilage and fire hazards across 150+ Intermarché locations, 100+ Coopérative U stores, and additional Carrefour and Monoprix outlets. The attack exploited known vulnerabilities in Danfoss AK-SM 800A refrigeration controllers, equipment that was connected directly to the internet without adequate security segmentation.

This incident represents a critical escalation in cyber-physical attacks targeting downstream retail and cold-chain infrastructure, moving beyond traditional data breaches or ransomware to directly disrupt food safety and supply-chain operations. For supply chain professionals, this attack underscores an urgent need to audit operational technology (OT) systems, particularly connected refrigeration and temperature-control equipment that often operate with legacy configurations and insufficient network isolation.

The attack demonstrates that threat actors are increasingly targeting the retail and cold-chain segment, not upstream suppliers, to maximize operational disruption while minimizing detection compared to traditional ransomware campaigns.