Cyber Attack Targets Refrigeration Systems in French Supermarkets

A sophisticated cyber attack has crippled the cooling systems of hundreds of supermarkets across France, leading to the spoilage of frozen and fresh goods. The financial damage is estimated to be in the millions of euros.

The Nature of the Breach

Hackers managed to infiltrate the software used to regulate temperature controls in refrigeration units. While these units typically undergo a brief defrost cycle overnight, the attackers manipulated the system to keep the units heating up. In some instances, temperatures soared to 50°C ($120^\circ\text{F}$) overnight.

Technical Workflow of the Attack

The vulnerability was linked to software provided by Danfoss, a Danish engineering company. According to the firm, the breach affected legacy models that were incompatible with newer security updates.

"Reliable refrigeration is critical to our customers' operations, and we remain committed to supporting our customers and helping them maintain secure and reliable systems they are used to." — Official Statement from Danfoss

Scope of the Damage

While France has approximately 15,000 supermarkets, the attack impacted roughly 400 locations. The transition from frozen $\rightarrow$ boiling was sudden, leaving managers to walk into waves of hot air on Monday morning.

Impact Summary by Retailer

Financial and Health Implications

To prevent health crises, retailers have been forced to discard massive quantities of food. In the Alsace region alone, two stores reported a combined loss of: $\text{Loss} = €270,000 \approx £228,000$

Evidence of the failure was captured by broadcaster BFMTV, which showed an ice cream freezer displaying a temperature of 26.5°C.

Immediate Recovery Actions

• Remove all compromised food from sale.
• Disconnect vulnerable systems from the internet.
• Restore temperature regulation in affected units.
• Restock shelves with fresh inventory.

Official Reactions and Investigations

The incident has sparked a legal and political response. A formal cyber-crime probe has been launched by the Paris prosecutor's office, which characterized the event as a "large-scale cyber-attack."

Key Statements:

• Dominique Schelcher (CEO of Coopérative U): He stated that targeting infrastructure essential to the food supply is unacceptable and called for a full investigation.
• Christophe Hansen (European Food Commissioner): Posted on X that "Food security requires more attention at all levels."

Simulated System Log of the Attack

[02:00] SYSTEM: Starting scheduled defrost cycle...
[02:15] ALERT: Unauthorized remote access detected from external IP.
[02:16] COMMAND: Set_Temp_Target = 50C
[02:16] STATUS: Cooling compressor DISABLED.
[06:00] ALERT: Critical temperature threshold exceeded.
[08:00] USER: Manager login - System Error: Temperature 50C.