French supermarket hack exposes cyber risks in outdated industrial software

Traders Union
All News
Business & Wealth
Companies
French supermarket cyber risks

Highlights

Cyberattack on October 11 disrupted refrigeration units at over 310 French supermarkets, causing spoiled inventory and impacting chains like Intermarché, Netto, Carrefour, and others.
Danfoss remote refrigeration controllers were actively targeted due to unpatched vulnerabilities, prompting a Cert-FR alert and highlighting the risks of outdated or unpatched industrial software.
Intermarché projects tens of millions of euros in losses, with industry-wide pressure to patch legacy vulnerabilities rapidly as exploitation windows shrink from years to days.

Attack scope and software weaknesses

As reported by Financial Times, refrigeration units at more than 150 Intermarché and Netto stores, 80 Coopérative U stores, about 80 Carrefour stores, and some Monoprix and E Leclerc locations warm up overnight on October 11, leaving workers to find spoiled food the next day. At least one vulnerability researcher also says stores in Spain, Portugal, Germany, Poland and Belgium have been affected.

Most of the supermarkets use a Danfoss central unit that controls freezer and refrigerator systems for an entire store, and that controller is accessible remotely. Cybercriminals appear to have found a single method that leaves every unit vulnerable, while Cert-FR issues a public alert the morning after the attack warning that Danfoss remote refrigeration controllers are being actively targeted in an ongoing security incident.

A year and a half earlier, Danfoss deems one line of its refrigeration controller products vulnerable to unauthorized remote login and makes software updates available. Investigators at France's cyber security agency ANSSI do not confirm how attackers get into the supermarket units, but researchers at Claroty find several vulnerabilities in the code for a Danfoss refrigeration model months earlier.

Another possible entry route also draws attention. The device's date function is described as being used to create a hidden administrator bypass that ignores the owner's password and allows full access, an approach that highlights the risks of relying on so-called security through obscurity; some affected devices are not updated, and some older units have no patches available at all.

Broader industry impact and rising patch pressure

Intermarché's chief executive says the attack will cost tens of millions of euros, underlining how cyber incidents tied to operational technology can quickly turn into material business losses. The fires reported in overheated units also raise the stakes for industrial and commercial suppliers whose connected devices can create physical hazards when basic security practices are not in place.

The supermarket incident comes days before a separate software scare pushes millions of websites offline as a precaution after a vulnerability is found in PHP, a widely used programming language. In that case, researchers testing cyber defenses with AI tools highlight memory-safety weaknesses and patches are issued, reinforcing a wider pattern in which long-known flaws in old software are becoming easier and faster to exploit.

There is no evidence that the French refrigeration hack uses AI, but security specialists are seeing more low-level legacy vulnerabilities exploited at high cost. With the time between identifying a weakness and turning it into an active exploit shrinking from years to days, aggressive patching and stronger security hygiene are becoming more urgent across industrial and commercial equipment, especially where failures can disrupt operations or trigger fires.

In our earlier article on the surge in cybersecurity funding, we noted that investors kept pouring capital into the sector as larger late-stage rounds lifted total financing even while the number of deals fell. We also highlighted how AI-focused and identity-security companies led fundraising and how big acquisitions underscored ongoing consolidation across the industry.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.