Cyberattack Raised Temperatures in Refrigerators at Hundreds of French Supermarkets
The first signs looked like technical failures: dark display cases, confusing alarms and maintenance crews trying to understand why cold-storage rooms were no longer keeping products chilled. But on Monday, Oct. 12, supermarkets across France discovered that their refrigerators and freezers had been remotely manipulated overnight. Temperatures in some stores reached 122°F (50°C), while others […]
A recent cyberattack caused refrigerators at numerous French supermarkets to malfunction, resulting in spoiled food and significant financial losses. On October 12th, stores across the country experienced issues with their temperature control systems, with some refrigerators reaching dangerous temperatures of up to 122°F (50°C) and higher.
The Paris prosecutor's office launched an investigation into the large-scale cyberattack targeting refrigeration systems in major grocery chains. Preliminary estimates suggest that hundreds of supermarkets were affected, though the exact number remains unclear. Companies like Carrefour, Monoprix, Les Mousquetaires, and Coopérative U reported disruptions at various locations.
The attack prompted stores to discard perishable items, leading to substantial losses for retailers. In some cases, temperatures rose to alarming levels, causing fires and activation of sprinkler systems. One store in Normandy experienced temperatures of 176°F (80°C), damaging equipment.
The incident exposed the risks associated with connecting supermarket refrigeration systems to the internet. The investigation is focusing on the management of these systems, particularly refrigeration controllers and management software made by Danish company Danfoss. A vulnerability in their software was identified by the National Agency for the Security of Information Systems (ANSSI).
Danfoss stated that the affected units were running outdated firmware and recommended keeping supported equipment updated. However, the exact method of intrusion and the identity of the attackers remain unclear. Technical investigators will need to determine the extent of the breach and the vulnerabilities present in the affected systems.
Written by urgent.news from Colombia One's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
