How hackers made fridges heat up in hundreds of French supermarkets in overnight cyberattack
A major cyberattack targeting Danfoss refrigeration software caused hundreds of supermarkets in France to overheat their freezers, resulting in millions of euros lost in spoiled food
A major cyberattack targeting Danfoss refrigeration software caused hundreds of supermarkets in France to overheat their freezers, resulting in millions of euros in spoiled food and triggering an official cybercrime investigation.
A major cyberattack targeting Danfoss refrigeration software caused hundreds of supermarkets in France to overheat their freezers, resulting in millions of euros in spoiled food and triggering an official cybercrime investigation.
A major cyberattack targeting Danfoss refrigeration software caused hundreds of supermarkets in France to overheat their freezers, resulting in millions of euros in spoiled food and triggering an official cybercrime investigation.
In a major cyberattack incident in France, hackers targeted hundreds of French supermarkets by causing refrigerators and freezers to overheat, spoiling food worth millions of euros.
The hackers reportedly gained control over the software that regulated the temperatures of the refrigeration units.
Hundreds of popular French supermarket chains, including Carrefour, Monoprix, the Les Mousquetaires-owned Intermarché, and Coopérative U, all reported that their fridges heated up to 50 degrees Celsius overnight on Monday.
The software system that was attacked belonged to manufacturer Danfoss, LeParisien reported. The system is used to remotely monitor the freezers and refrigerated display cases and trigger an alert in case of a malfunction or sudden temperature increase. They are also used to initiate automatic defrosting cycles.
Representatives of Danfoss told Le Parisien that their "older appliances have reached the end of their lifespan and no longer receive software or security updates," and that “Danfoss has long advised its customers to keep their refrigerators up to date and to migrate older generations to the latest software solutions."
The hackers reportedly exploited this vulnerability. Supermarket freezers go through defrosting cycles overnight, where temperatures rise slightly. The hackers ordered the units to stay hot in the process. Danfoss did not clarify just how hot the temperatures could get.
Food worth millions has not been available for sale and consumption overnight. The first retailers to report the attack were Monoprix, Leclerc, and Intermarché, with 150 to 200 stores impacted, and Coopérative U, where "fewer than a hundred outlets" were affected. About 80 Carrefour supermarkets out of their 6000 stores were also affected.
The number of stores affected is reportedly around 400 based on figures the chains provided.
Several fires were also reported. Some managers said that they were hit by a wave of hot air from the freezers on Monday morning.
The Paris Prosecutor's Office said that its cybercrime unit took up the case on its own initiative on Tuesday. The investigation aims to identify the victims and assess the damages reported.
European Food Commissioner Christophe Hansen condemned the hack in a post on X and added: "Food security requires more attention at all levels. Because the weaponisation of food has become a reality."
Felix Aime, a senior cyber threat intelligence analyst at Sekoia Threat Detection and Research, said the attack affected several European countries, including Spain, Portugal, Poland, Germany and Belgium, Reuters reported.