Cyberattack on French Supermarkets Spoils Food Supply Chain

Gulfnews

Cyberattack on French Supermarkets Spoils Food Supply Chain

First seen 14 Oct 2026, 14:38 UTC • •57.5

Article Content

1 / 4

Browse articles

ThreatCluster •October 14, 2026 at 17:35 UTC

•Hackers raised fridge temperatures to 50°C, spoiling food in over 300 supermarkets.
•The attack exploited outdated Danfoss refrigeration controllers with known vulnerabilities.
•French authorities warn of similar risks in supermarkets across Europe.

On October 11, 2026, hackers targeted refrigeration controllers in over 300 French supermarkets, pushing temperatures to 50°C and causing large food spoilage. The attack affected major chains including Intermarché, Cooperative U, and E.Leclerc, leading to losses estimated in the tens of millions of euros. The attackers exploited outdated Danfoss refrigeration controllers, many of which lacked necessary firmware updates. French cyber authorities have warned that similar vulnerabilities exist in other countries, including Spain and Germany. No group has claimed responsibility, and the exact method of entry remains unconfirmed. Experts emphasize the need for improved security measures, including removing direct internet access and updating old hardware.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-11

Cyberattack on French supermarkets

Hackers compromised refrigeration systems, causing food spoilage across multiple chains.

2026-10-14

Reporting on the incident

Multiple outlets report on the attack's impact and the vulnerabilities exploited.

More articles in this cluster (3)

Threat Graph

14 entities, 13 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Malware

Organization (9)

Carrefour
Coopérative U
Cooperative U Outlets
E Leclerc
E.Leclerc
Intermarché
Les Mousquetaires
Monoprix
Netto

Affected Platform (4)

Copeland XWEB
Danfoss Ak-sc
Danfoss Ak-sm
Dixell XWEB

Relationships

Malware targets Copeland XWEB
Malware targets Danfoss Ak-sc
Malware targets Danfoss Ak-sm
Malware targets Dixell XWEB
Malware related to Carrefour
Malware related to Coopérative U
Malware related to Cooperative U Outlets
Malware related to E Leclerc
Malware related to E.Leclerc
Malware related to Intermarché
Malware related to Les Mousquetaires
Malware related to Monoprix
Malware related to Netto

Following this threat?

Track Carrefour in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What systems were affected?

The attack primarily targeted Danfoss refrigeration controllers used in supermarkets.

Is there a known method of exploitation?

The exact method remains unconfirmed, but vulnerabilities in outdated hardware are suspected.

What preventive measures should be taken?

Retailers should update firmware, remove direct internet access, and secure remote maintenance.

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…