Time Cyberattack on French Supermarkets Compromises Refrigeration Systems
Article Content
- •Hackers raised supermarket fridge temperatures to 50°C, spoiling food and causing fires.
- •The attack targeted outdated refrigeration systems from Danfoss, affecting multiple supermarket chains.
- •French authorities are investigating the incident, which could lead to significant financial losses.
On October 11-12, 2026, hackers targeted refrigeration systems at hundreds of French supermarkets, raising temperatures to 50°C (122°F) and causing food spoilage and fires. The Paris prosecutor's office is investigating the incident, which affected chains like Intermarché and Coopérative U, with damage estimates in the tens of millions of euros. The attack exploited vulnerabilities in outdated refrigeration management systems from Danish supplier Danfoss. Reports indicate that the systems were manipulated to enter extended defrost cycles, compromising food safety. France's National Cybersecurity Agency (ANSSI) is involved in the investigation, emphasizing the need for better cybersecurity practices in food supply chains. The specific method of access used by the attackers has not yet been disclosed.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Carrefour in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which supermarket chains were affected?
What vulnerabilities were exploited?
What should supermarkets do now?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…