Hackers reportedly raised refrigeration temperatures to 50°C at hundreds of French supermarkets, forcing retailers to discard fresh and frozen food and exposing potential gaps in insurance cover for cyber-related losses.
The attack began overnight on 11–12 October, when attackers allegedly triggered forced defrosting remotely. France’s finance minister, Roland Lescure, told parliament on 13 October that about 700 supermarkets had been affected, according to the Associated Press, although he said national food supplies were not at risk.
Go deeper with GlobalData
Discover B2B Marketing That Performs
Combine business intelligence and editorial excellence to reach engaged professionals across 36 leading media platforms.
Thierry Cotillard, president of Les Mousquetaires, the group that owns Intermarché, estimated that the nationwide cost could reach tens of millions of euros, Reuters reported.
Retailers discard fresh and frozen stock
Intermarché initially told Agence France-Presse (AFP) that between 150 and 200 stores had been affected, while Coopérative U reported fewer than 100 outlets. These early figures preceded the government’s broader estimate.
Intermarché said the affected fresh and frozen products would have to be discarded, creating food waste and financial losses.
Coopérative U chief executive Dominique Schelcher condemned the attack on equipment essential to preserving food. He said teams were working with refrigeration specialists to restore normal operations as quickly as possible.
For affected stores, recovery involves restoring safe temperature controls, assessing damaged stock and replenishing fresh and frozen ranges. The disruption also highlights the importance of reliable refrigeration to food safety and day-to-day supermarket operations.
Insurance cover comes under scrutiny
The financial impact has raised questions about whether retailers can recover the cost of spoiled stock through their insurance policies.
Insurance brokers told Reuters that cyber policies typically exclude physical losses. Cover for spoiled food depends on individual policy terms and the circumstances of the incident. Intermarché initially told AFP that its insurance did not cover this type of incident.
The distinction matters because the costs of investigating a cyberattack, restoring equipment and replacing damaged inventory may fall under different policy provisions.
The incident also raises questions about responsibility for maintaining connected equipment and whether retailers, technology suppliers or maintenance providers could face financial exposure when refrigeration controls are compromised.
Investigation examines damage and reported fires
The Paris public prosecutor’s office opened an investigation into the attack, assigning it to France’s Office for Combating Cybercrime (OFAC).
Prosecutors said investigators would identify victims and establish links between the attack and reported damage, including food losses and fires. The initial announcement did not establish the causes or extent of the fires.
Early reports focused on refrigeration controls supplied by Danish manufacturer Danfoss. France’s cybersecurity agency subsequently said systems from Copeland and its subsidiary Dixell had also been compromised, Reuters reported. Copeland declined to confirm that information, saying its priority was protecting customers’ operations.
Danfoss said many affected units used outdated software or were no longer supported.
The identification of equipment suppliers does not, by itself, establish how the attackers gained access or demonstrate that the manufacturers’ central systems were breached.
Connected equipment creates operational risks
The attack demonstrates how compromised store technology can cause physical damage and disrupt retail operations without directly targeting payment systems or customer data.
Connected refrigeration controls allow retailers and maintenance providers to monitor temperatures and adjust equipment remotely. If attackers gain access to these functions, they can potentially interfere with the systems that keep perishable food safe.
Retailers therefore need to consider whether refrigeration equipment receives security updates, whether remote access is adequately protected and how staff should respond when automated controls can no longer be trusted.
For international grocery operators, the incident brings three priorities into focus: maintaining the cold chain, securing the equipment that controls it and understanding who bears the financial loss when those protections fail.
