Roughly 250 French supermarkets have been forced to bin refrigerated stock after a cyberattack knocked out the systems that keep their industrial chillers and freezers under control. Approximately 150 Intermarché outlets and fewer than 100 Super U stores discarded dairy, meat and other chilled goods once malware blocked the panels staff rely on to monitor refrigeration equipment, according to reporting from The Next Web on 12 October 2026, citing sources close to the affected chains.
- Scale of the damage: Hundreds of stores destroyed saleable food not because their fridges necessarily failed, but because nobody could prove they had not.
- The real target: Payment terminals and customer databases were untouched. Attackers went after Danfoss cold-chain management software governing temperature, alarms and diagnostics.
- A known class of flaw: Claroty Team82 published research in August on vulnerabilities in industrial refrigeration systems, including Modbus communication weaknesses affecting several European vendors such as Danfoss.
- Regulatory blind spot: Europe’s NIS2 Directive does not explicitly fold food distribution chains into its core scope, even though the cold chain behaves like critical infrastructure.
A Breach Measured in Tonnes, Not Terabytes
The intrusion that defined this month’s most unusual security incident was never about stolen records or cryptocurrency ransoms. It was about spoiled meat and yoghurt dumped in skips. The objective was the software layer that regulates the cold chain: Danish-made Danfoss systems that manage temperature setpoints, alarm logic and equipment diagnostics across large-format grocery stores.
Once the malware locked the control panels, store teams lost the ability to confirm whether cabinets were actually holding their required temperatures. French rules require dairy and meat products to be discarded when they rise above 8°C for more than six hours. Without working alarms, verifying that threshold would mean physically opening hundreds of metres of refrigeration and measuring by hand — an operationally impossible task. Faced with that uncertainty and a regulatory obligation to keep unsafe food off shelves, retailers chose disposal.
How a Refrigerator Becomes an Attack Surface
The question sounds absurd until you look at how modern refrigeration is wired. Supermarket temperature controllers have been connected to corporate networks for more than a decade, enabling remote maintenance, automated alerts and energy optimisation. That convenience turns them into an attack vector indistinguishable from any other poorly segmented IoT device.
Claroty Team82’s August report identified faults in the Modbus communication protocol used by multiple European manufacturers, Danfoss among them. The likely path in this case would be privilege escalation from the corporate network down to the temperature controllers themselves. It has not been confirmed that this specific incident followed that route, but the pattern fits the published research.
Critical Infrastructure That Nobody Treats as Critical
Attacks on critical infrastructure usually evoke energy grids, water treatment and transport networks. The food cold chain is critical infrastructure too, yet it is treated as an afterthought: geographically distributed, permanently online, dependent on third-party software with irregular patch cycles, and operated by staff with no cybersecurity training whatsoever.
Consider the scenario of a coordinated strike against several supermarket chains during a July heatwave, when cooling demand peaks and safe temperature margins are at their narrowest. After this week, that is no longer a thought experiment.
Regulation Is Running Behind
Europe’s response remains incomplete. The NIS2 Directive, in force since October 2024, obliges operators of essential infrastructure to report incidents and meet defined security standards, but it does not explicitly include food distribution chains within its primary scope. That omission is precisely the kind of gap this incident is likely to force onto the European Parliament’s agenda before the end of the quarter.
Insurance may absorb the immediate losses, and store shelves will refill within days. The structural lesson is harder to write off. A single vendor’s refrigeration software sits beneath hundreds of retail sites, meaning one successful exploit can cascade across an entire national grocery footprint without ever touching a point-of-sale terminal. If a relatively basic compromise of one cold-chain supplier can paralyse 250 supermarkets in France, the more uncomfortable figure is the number of comparable systems elsewhere in Europe still running on unsegmented networks and waiting for identical treatment.