Cyber-Attack Forces Mass Defrost Across French Supermarket Chains

Intermarché and Cooperative U said on Monday, October 12, 2026, that a cyber-attack forced refrigerators to defrost in hundreds of supermarkets across France. The retailers told AFP that refrigeration systems had been remotely compromised, in what both described as an unprecedented incident. The Guardian

The disclosed scope covers an estimated 150 to 200 Intermarché shops and almost 100 Cooperative U outlets. Cooperative U chief executive Dominique Schelcher said refrigeration systems had been affected since Sunday night. Intermarché said affected branches would have to throw away all fresh and frozen products. Once chilled food warms past safe limits, food safety rules require disposal.

A third chain may be involved. BFM TV reported that E. Leclerc was also affected, with hackers remotely triggering forced defrosting in numerous stores. E. Leclerc had not immediately confirmed that report. The Paris prosecutor's office confirmed a large-scale cyber-attack affecting refrigerators of several major French food retail chains. It opened an investigation to identify victims and establish the link to reported foodstuff losses and outbreaks of fires. The Guardian

The broader context here is how modern supermarkets manage cold. Refrigeration is run through networked controllers that set temperatures, schedule defrost cycles and send alarms. Think of one thermostat panel overseeing many stores. Central monitoring lowers cost and speeds repairs. It also means a single valid command from a central platform or maintenance portal can reach many sites within hours.

Looking at what this means for response, the first job is containment and sorting. Affected stores must disconnect controllers, save temperature logs and throw out exposed stock under food safety rules. Technology teams must trace how attackers got in, whether through company networks, outside maintenance access or a vendor platform used by more than one chain. No attacker has been identified in the disclosed material.

In my view, the prosecutor's mandate is telling. Investigators must not only list victims but establish the link to food losses and outbreaks of fires. That scope goes beyond a computer break-in. Property damage, food safety exposure and fire risk involve different evidence and compensation questions. Retailers, insurers and refrigeration firms will need a shared record of which controllers got which commands and when.

Looking at what comes next, several technical questions will shape liability and repairs. Whether remote access logs survived. Whether network separation contained the spread after the Sunday night start. Whether separate temperature monitors caught the warming before spoilage. And whether unaffected chains cut off remote management as a precaution. Future purchases of connected cold equipment will turn on those answers.

What the early pattern suggests is still limited. The victim count may change as investigators map exposure and test the Leclerc reports. For now, simultaneous defrost commands across rival chains point to a shared access route rather than separate store failures. That route is what investigators must explain.