Hackers remotely triggered the forced defrosting of refrigeration systems in hundreds of supermarkets across France, spoiling fresh and frozen food and prompting a Paris prosecutor's investigation into what Cooperative U's chief executive called an "unprecedented" cyberattack.
At least 300 Intermarche or Netto stores were hit, along with more than 100 Cooperative U outlets and several E. Leclerc stores, the retailers told AFP on Monday. BFM TV reported that temperatures were altered remotely, destroying stock of fresh and frozen products.
Which retailers and systems were affected
The affected branches will have to "throw away all of the products" that are fresh and frozen, Intermarche told AFP. A source close to the issue said refrigeration control systems from Danish manufacturer Danfoss were targeted.
Danfoss said most of the affected equipment was "legacy" products that "no longer receive software or security updates". It named its AK-SM800 and AK-SC355 fridge regulators as notably affected, with a version of the former running "outdated firmware", and added that it had long advised supermarkets to update those models.
A source close to French Prime Minister Sebastien Lecornu said the national cybersecurity agency had identified "a vulnerability in software supplied by a Danish company" and contacted the vendor. It is liaising with European counterparts because other countries may be affected.
Specialist retail news site jebosseengrandedistribution.fr said Carrefour Market and Monoprix were also affected, but neither company has confirmed this to AFP.
Food security fears and the investigation
Paris prosecutors confirmed an investigation into "the large-scale cyberattack affecting the refrigerators of several major food retail chains across France". The probe will seek to identify the victims and establish links to reported foodstuff losses and fires.
