Skip to content
Cyberattack Spoils Food at Hundreds of French Supermarkets

Cyberattack Spoils Food at Hundreds of French Supermarkets

First seen 12 Oct 2026, 14:31 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 15:35 UTC
  • •Hackers targeted refrigeration systems of major French supermarkets, causing massive food spoilage.
  • •The attack exploited known vulnerabilities in outdated Danfoss software, with critical CVEs identified.
  • •French authorities have opened an investigation into the unprecedented cyberattack.

On October 12, 2026, a cyberattack targeted the refrigeration systems of several major French supermarket chains, including Coopérative U and Intermarché. The attackers exploited outdated software from Danish provider Danfoss, remotely triggering defrost cycles that raised temperatures in refrigeration units to 50°C (122°F). This incident affected approximately 150 to 200 Intermarché stores and nearly 100 Coopérative U outlets, leading to significant food spoilage and estimated losses in the millions of euros. The attack is described as unprecedented, with French authorities opening an investigation. Vulnerabilities in Danfoss's software had been publicly documented prior to the attack, including CVE-2023-25915, which has a CVSS score of 9.9, indicating critical severity. The identity of the attackers remains unknown, and the affected companies are working to restore operations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2023-08-21
CVE-2023-25915 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-05-08
CVE-2025-41450 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-08-22
CVE-2025-41451 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-08-22
CVE-2025-41452 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-11
Cyberattack initiated
Hackers began compromising refrigeration systems overnight, affecting multiple supermarket chains.
Glitchwire
2026-10-12
Attack confirmed by Coopérative U
Dominique Schelcher, CEO, confirmed the attack on X, stating it affected several stores.
Infosecurity-Magazine
2026-10-12
Investigation opened
The Paris prosecutor's office confirmed an investigation into the large-scale cyberattack.
Euronews

More articles in this cluster (4)

Following this threat?

Track Carrefour and CVE-2023-25915 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What vulnerabilities were exploited?
The attack exploited vulnerabilities in Danfoss refrigeration software, including CVE-2023-25915, which has a CVSS score of 9.9.
How many stores were affected?
Approximately 150 to 200 Intermarché stores and nearly 100 Coopérative U outlets were impacted.
What actions are being taken?
An investigation has been launched by the Paris prosecutor's office, and affected companies are working to restore operations.