How Hackers Overheated Freezers in 150 French Supermarkets
150 Intermarché stores in France were targeted overnight in a cyberattack that pushed refrigerators and freezers to as high as 50 degrees Celsius. The intrusion shut down cooling across fresh and frozen aisles in hundreds of French supermarkets. Reuters
The attack manipulated refrigeration control systems supplied by Danish manufacturer Danfoss. AFP Investigators said the set temperatures climbed far above safe storage ranges. Food in the affected cases spoiled rapidly. Losses were estimated at millions of euros. BBC
The heating caused more than spoilage. Several units overheated to the point of fire. Reuters Stores reported fires linked to the malfunctioning equipment alongside the loss of fresh and frozen food. CBS News Staff had to pull inventory and isolate equipment as temperatures rose.
The incident was reported on Oct. 12, 2026. Intermarché was the named chain, with 150 of its stores identified as targets. The wider disruption extended to hundreds of supermarkets in France.
The broader context here is the entry point the attackers chose. Refrigeration controllers sit where computer systems meet physical operations. Like a central thermostat for an entire store, they are networked for monitoring, maintenance and energy management. Take them over and the effect is immediate and physical. Warm temperatures ruin perishable stock within hours. Electrical stress creates fire risk. Recovery takes more than restoring data. It requires cleaning, inspection, recertification of the cold chain and restocking.
Looking at what this means for retail and food-system risk, three questions stand out. First, access. Control systems from a single vendor were implicated across multiple sites, which raises questions about remote management passwords, software supply channels, and separation between store networks and equipment controllers. Second, detection. Overnight manipulation points to timing chosen for low staffing. Alert thresholds, centralized monitoring and automatic shutdown rules will come under scrutiny. Third, liability and continuity. With losses in the millions of euros, retailers, equipment suppliers and insurers will sort out responsibility for patching, configuration and incident response.
In my view, the diplomatic and regulatory side bears watching as closely as the forensics. A cross-border link, French retail sites and a Danish supplier, places the case inside European debates about cybersecurity for critical sectors, incident notification and product security duties. Food retail is not usually grouped with energy or telecoms in public debate. Yet failure here carries public safety effects, from fire to foodborne illness risk, and economic costs for suppliers and consumers.
What comes next will likely be technical before it is political. Store-by-store repairs, forensic copies of controllers, review of logs for initial access, and checks on whether other operators using the same systems were exposed. Attribution may follow, or it may not. For planners, the signal is already clear. Supermarket refrigeration is industrial infrastructure. It needs to be defended that way.
