Uk.Finance.Yahoo Cyberattack Disrupts French Supermarkets' Refrigeration Systems
Article Content
- •Over 350 French supermarkets were affected by a cyberattack on refrigeration systems.
- •The attack exploited outdated software from Danfoss, with known vulnerabilities.
- •No group has claimed responsibility, raising questions about the attack's motives.
On October 13, 2026, French investigators began searching for hackers who compromised cooling units at over 350 supermarkets, including Carrefour and Monoprix, causing food spoilage and potential fires. The attack manually altered refrigerator temperatures, exploiting vulnerabilities in outdated software from Danish firm Danfoss. The affected fridges were reportedly running legacy firmware that no longer received security updates. Cooperative U's CEO estimated losses could reach tens of millions of euros nationwide. Despite the scale of the attack, no group has claimed responsibility, leaving investigators puzzled. Cybersecurity experts noted the attack could have been easily executed due to basic cyber hygiene failures, with many vulnerable systems still accessible online. The investigation is ongoing, with authorities assessing risks to other companies.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Carrefour in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems are affected?
What vulnerabilities were exploited?
What should affected supermarkets do?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…