French supermarket refrigeration attack spoils food; scale disputed

Unknown attackers remotely heated French supermarket refrigeration to about 50°C from 11 October 2026, spoiling food, while totals and cause remain disputed.

From the night of 11 October 2026, unknown attackers remotely forced commercial refrigeration at French supermarkets into defrost, heating units to about 50°C and spoiling food; some reports also describe fires, disrupted deliveries and electronic shelf labels, and a Paris prosecutor investigation, with no attacker, claim, or ransom named. Intermarché, Netto, Coopérative U/Super U, E.Leclerc, Carrefour/Carrefour Market, and Monoprix were cited, but store totals conflict, ranging from about 150 Intermarché stores and 250–350 or more than 400 sites to Roland Lescure’s roughly 700 of about 10,000 French supermarkets, alongside smaller chain-level figures and a report that Coopérative U is not a Danfoss customer. Loss estimates likewise range from about €270,000 at two Haguenau or Alsace stores and tens to hundreds of thousands of euros per store to tens of millions of euros for Les Mousquetaires. Danfoss attributed most impact to unsupported AK-SM 800 and AK-SC 355 units and some outdated AK-SM 800A firmware, while CERT-FR and ANSSI later added Copeland and Dixell XWEB controllers and advised taking systems offline or tightly restricting them, then resetting, patching, and rotating credentials. Most sources do not confirm CVE-2023-25915 or CVE-2025-41450, CVE-2025-41451, and CVE-2025-41452 as the cause, though Dark Reading links the attack to the three 2025 flaws, and published exposure counts disagree; Sekoia reported other European countries affected, and an Ahold Delhaize disruption in the Netherlands and Belgium is described as separate.

• From the night of 11 October 2026, unknown attackers remotely forced supermarket refrigeration into defrost, heating units to about 50°C and spoiling food.
• Chains cited include Intermarché, Netto, Coopérative U/Super U, E.Leclerc, Carrefour/Carrefour Market, and Monoprix; totals conflict, from about 150 Intermarché stores and 250–350 or more than 400 sites to Roland Lescure’s roughly 700 of…
• Loss figures range from about €270,000 at two Haguenau or Alsace stores and tens to hundreds of thousands of euros per store to tens of millions of euros for Les Mousquetaires.
• Danfoss attributed most impact to unsupported AK-SM 800 and AK-SC 355 units and some outdated AK-SM 800A firmware; ANSSI later added Copeland and Dixell XWEB controllers.
• CVE-2023-25915 and CVE-2025-41450, CVE-2025-41451, and CVE-2025-41452 are discussed, but most sources do not confirm they were used; Dark Reading links the attack to the three 2025 flaws.