Hackers raised supermarket freezer temperatures to 50°C, sending fresh goods from 300 stores into the trash overnight.

The losses were real: once the cold chain was broken, the goods could no longer be sold. The Intermarché store in Mur-de-Bretagne, Brittany, notified customers on Facebook that it had discarded all its fresh products—including meat—due to the incident. In the Bas-Rhin department near Haguenau, two supermarkets suffered combined losses of approximately €270,000: the Intermarché store lost its entire frozen inventory (around €50,000), while a Leclerc store in Wasselonne discarded both fresh and frozen items, amounting to roughly €220,000. Industry insiders estimate national losses may reach several million euros; one report even included a photo showing an ice cream shelf thermometer stuck at 26°C. The Paris Public Prosecutor’s Office has opened an investigation, led by the Cybercrime Division and handled by the French Office for Combating Cybercrime (OFAC). Figure 2: Real-world view of a supermarket refrigeration and freezing area (Source: Numerama) The attackers did not simply cut power. According to BFM TV, they remotely triggered “forced defrosting” (dégivrage forcé)—hijacking the refrigerators’ normal defrost cycle and forcing it to run continuously. Normally, defrosting melts frost buildup on equipment; industry experts note such systems can be configured to defrost for up to two hours within any 24-hour period. But when forced to run nonstop—with temperature settings altered to 50°C—the units operated like heaters for several hours. Numerama added a technical detail: devices running Danfoss refrigeration control software version 4.0 or earlier were especially vulnerable. At some stores, anomalies began at midnight, leaving perishables unable to survive until opening time; at others, the attack occurred later, allowing staff to salvage part of their fresh inventory. Figure 3: Illustration of refrigerator cabinet temperature pushed to 50°C (Source: Cyber Security News) Refrigeration equipment in supermarkets is not composed of isolated standalone fridges. Freezer cabinets, chilled display cases, and compressors are typically connected to a central controller—a small computer that sets temperatures for each refrigeration circuit and triggers alarms. Danfoss (a Danish industrial technology company founded in 1933), a major supplier of such controllers in France, installed many AK-SM 800A units—among the most widely deployed models across French retail chains—helping explain the unusually broad geographic impact. These controllers are networked so refrigeration engineers can remotely monitor temperatures and adjust parameters—eliminating the need for nighttime site visits when alarms sound. The problem arises when attackers gain access to the same interface: with identical privileges, they can easily reprogram freezers—from −20°C to +30°C—after stores close. This risk had long been flagged. On August 9, 2026, Team82—the research team under industrial cybersecurity firm Claroty—published an analysis of the AK-SM 800A. Using the internet device search engine Censys, they identified 2,765 such controllers exposed to the public internet, with management interfaces accessible to anyone. Researchers also discovered a hidden mechanism apparently intended for after-sales support and maintenance, enabling administrator-level login without password input. They even reverse-engineered the algorithm generating these backdoor credentials.

Sleeping Message Interpretation [2026-10-13]: Supermarket Cyberterrorism

Here’s the condensed version: 1. Hackers attacked hundreds of supermarkets across France, remotely raising refrigerator temperatures to 50°C and destroying large quantities of fresh food. Rating: Historical Significance H2; Real-World Impact B. Subject: Refrigeration systems across multiple French retail chains were compromised. Danfoss supplies the refrigeration management systems—but installation, maintenance, and upgrades involve contractors and individual stores; responsibility cannot be reduced solely to one manufacturer. Resources & Execution: Attackers exploited the refrigeration equipment’s built-in defrost function, turning preservation systems into continuous heating devices. Controllers—designed to centrally manage temperature, operating schedules, and alarms—became weapons once remote administrative access was compromised. Danfoss had issued security updates for related products as early as 2025; known vulnerabilities confirm the risk exists, but it remains unconfirmed whether any specific vulnerability was exploited in this incident. Historical Context: Episode 278 of *Sleeping Message* examined the Colonial Pipeline cyberattack, highlighting how digital intrusions can disrupt physical supply chains. This event goes further: rather than first extorting operators and waiting for operations to halt, attackers directly damaged inventory by altering equipment parameters. Remote maintenance reduces management overhead for geographically dispersed stores—but also exposes all locations using similar equipment to identical risks. Outcomes & Distribution: Stores bore the costs of food disposal, temporary closure, and restocking; consumers faced localized supply shortages. The manufacturer stated most affected devices were legacy models no longer receiving security updates. This raises deeper questions—not only about when vulnerabilities emerged, but also who bears responsibility for retiring outdated equipment, who funds replacements, and why discontinued devices remain remotely controllable. Core Judgment: Networked devices have now embedded cybersecurity directly into the food supply chain. The convergence of aging infrastructure, fragmented maintenance responsibilities, and mass remote-control capabilities enables a single intrusion to inflict widespread physical damage. Sources: ・*Sleeping Message*, Episode 278. ・Primary sources: Reuters’ interview with Intermarché; field investigation and manufacturer response by *Le Monde*; Danfoss security advisory; Claroty’s technical research. ・Fact Status: The attack and resulting food loss have been confirmed by multiple independent sources; the number of affected stores continues to evolve as investigations progress. The attackers’ identities, motives, and precise intrusion methods remain unconfirmed—making it premature to label this a terrorist act. Whether the recent Dutch retail system failure shares a common origin with the French incident has also not been verified. The original Pengpai article was inaccessible; all information above has been cross-checked using alternative authoritative sources. 2. South Korea’s Military Manpower Administration Director: Sports-related military service exemptions will be phased out gradually; implementation plan to be drafted next month. Rating: Historical Significance H2; Real-World Impact B. Subject: The Military Manpower Administration oversees conscription policy, with coordination from defense, culture/sports ministries, and the National Assembly. Olympic and Asian Games performance determines whether certain athletes may preserve their professional careers—making military service policy itself a high-value career resource. Resources & Execution: The commonly cited “exemption from military service” does not mean full exemption. Eligible individuals instead serve as “art and sports personnel,” currently requiring 34 months of professional activity in their field plus 544 hours of public service. The key benefit lies in being permitted to continue training, competing, and working professionally—whereas regular conscripts must suspend all prior life activities.

Investigators Hunt French Supermarket Fridge Hackers, No Claim of Responsibility

Oct 13, 2026

French investigators probe a cyberattack on supermarket refrigeration units causing widespread food spoilage, revealing security flaws in outdated Danfoss firmware.

reuters

2026-10-12

Hackers Overheat French Supermarket Fridges, Causing Fires and Food Losses

2026-10-13

Investigators Hunt French Supermarket Fridge Hackers, No Claim of Responsibility

Investigators Hunt French Supermarket Fridge Hackers, No Claim of Responsibility

FAQ