Hackers raised supermarket freezers to 50°C, sending fresh goods from 300 stores into the trash overnight.

In the early hours of October 12, refrigerated cabinets across numerous French supermarkets quietly transformed into 'heaters.' Attackers remotely altered temperature settings—raising freezer units, normally maintained below zero, all the way to 50°C. When staff opened stores at dawn, fresh milk, meat, and frozen foods had collectively 'expired.' One employee described the moment of opening the door as being hit by 'a wave of hot air.' This cyberattack targeting refrigeration systems was far larger in scale than initially imagined. Figure 1: Cybersecurity-themed illustration featuring a shopping cart and padlock (Source: Frandroid) Between the nights of October 11 and 12, attackers compromised refrigeration control systems across multiple French supermarket chains. Les Mousquetaires Group confirmed to BFM TV that 300 of its Intermarché and Netto stores were affected—a figure double the initial estimate of 150. Nearly 100 stores belonging to Coopérative U were also impacted. E.Leclerc Group told AFP that one of its refrigeration equipment suppliers had suffered a cyberattack, disrupting operations across several stores. Additionally, around 30 Monoprix stores were caught up in the incident. Employees at Carrefour Market described similar scenes on online platforms; Metro stores and independent butcher shops may also have been affected. The losses were tangible: once the cold chain broke, products could no longer be sold. The Intermarché store in Mur-de-Bretagne, Brittany, notified customers via Facebook that it had discarded all fresh items—including those from its in-store butcher. In the Bas-Rhin department near Haguenau, two supermarkets incurred combined losses of approximately €270,000: the Intermarché’s entire frozen inventory—worth about €50,000—was scrapped, while a Leclerc store in Wasselonne discarded both fresh and frozen goods, amounting to roughly €220,000. Industry insiders estimate nationwide losses may reach several million euros. One news report included a photo showing an ice cream shelf thermometer still reading 26°C. The Paris Public Prosecutor’s Office has opened an investigation, led by the Anti-Cybercrime Department and handled by the Office for Anti-Cybercrime (OFAC). Figure 2: Real-life photo of a supermarket refrigerated and frozen section (Source: Numerama) Attackers did not simply cut power. According to BFM TV, they remotely triggered 'forced defrosting' (dégivrage forcé), converting the refrigerators’ normal, intermittent defrost cycle into continuous operation. Under normal conditions, defrosting merely melts accumulated frost on equipment components; industry experts note such systems can be configured to defrost for up to two hours within any 24-hour period. Once forced into continuous operation—with temperature settings altered to 50°C—the cabinets functioned like heaters for several hours. Numerama added a technical detail: primarily affected were older versions of Danfoss refrigeration control software—specifically, versions prior to 4.0. At some stores, anomalies began at midnight, leaving perishables unable to survive until opening time; at others, the attack occurred later, allowing staff to salvage part of their fresh inventory. Figure 3: Illustration showing refrigerator temperature pushed to 50°C (Source: Cyber Security News)

Bedtime Message Analysis [2026-10-13]: 'Supermarket Terror Attack'

Here’s the Express Edition~ 1. Hackers attacked hundreds of supermarkets across France, remotely raising refrigerator temperatures to 50°C and destroying large quantities of fresh food. Rating: Historical Level H2; Reality Level B. Subject: Refrigeration equipment across multiple French retail networks was targeted. Danfoss supplies refrigeration management systems—but equipment installation, maintenance, and upgrades involve contractors and individual stores. Responsibility cannot be reduced solely to a single manufacturer. Resources & Operations: Attackers exploited the built-in defrosting capability of refrigeration units, forcing the preservation system into continuous heating mode. Controllers are designed to centrally manage temperature, operating schedules, and alarms; once remote management permissions were compromised, normal functions became direct instruments of physical damage. Danfoss issued security updates for related products in 2025; known vulnerabilities confirm risks exist, but it remains unconfirmed whether any specific vulnerability was exploited in this incident. Historical Context: Episode 278 of 'Bedtime Message' examined the Colonial Pipeline incident, focusing on how cyber intrusions disrupt real-world supply chains. This event goes further: rather than first extorting operators and waiting for shutdowns, attackers directly damaged inventory by altering equipment operational parameters. Remote maintenance reduces management costs for geographically dispersed stores—but also exposes all locations using identical equipment to similar risks simultaneously. Outcomes & Distribution: Stores bore losses from food spoilage, temporary closures, and restocking. Consumers faced localized supply disruptions. Manufacturers state most affected devices were outdated models no longer receiving security updates; thus, questions extend beyond when vulnerabilities emerged—to who bears responsibility for equipment decommissioning, who funds replacements, and why discontinued devices remain capable of remote control. Core Judgment: Networked devices have now directly linked cybersecurity to the food supply chain. The convergence of aging equipment operating long-term, fragmented maintenance responsibilities, and batch-enabled remote control allows a single intrusion to inflict massive physical damage simultaneously. Sources: ・'Bedtime Message': Episode 278. ・Key Sources: Reuters’ interview with Intermarché; on-site investigations and manufacturer responses by Le Monde; Danfoss security advisories; Claroty technical research. ・Fact Status: The attack and resulting food loss have been confirmed by multiple parties; the number of affected stores continues to evolve with ongoing investigations. The attackers’ identities, motives, and precise intrusion methods remain unconfirmed—and the incident cannot yet be classified as terrorism. Whether the recent Dutch retail system failure shares a common origin with the French event remains unverified. The original Pengpai article was inaccessible; the above information has been cross-checked using alternative sources. 2. South Korea’s Military Manpower Administration Director: Exemptions from mandatory military service for athletes will be gradually abolished; implementation plan to be drafted next month. Rating: Historical Level H2; Reality Level B. Subject: The Military Manpower Administration oversees conscription; defense authorities, the Ministry of Culture, Sports and Tourism, and the National Assembly jointly participate in revising exemption policies. Olympic and Asian Games results determine whether certain athletes may preserve their professional careers—making military service policy a highly valuable career resource. Resources & Operations: What is commonly termed 'exemption from military service' does not mean full exemption from duty. Eligible individuals instead serve as 'artistic or athletic personnel,' under current arrangements involving 34 months of professional activity in their field plus 544 hours of public service. The key benefit lies in continued training, competition, and professional engagement—whereas ordinary conscripts must suspend their pre-service lives entirely. Historical Context: This system, justified by national prestige goals, converts international competition achievements into preferential service arrangements.

Cyberattacks Hit European Supermarket Chains, Disrupt Refrigeration Systems

just now

Cyberattacks compromised refrigeration systems in hundreds of European supermarkets, impacting food security and causing spoilage. Authorities are investigating vulnerabilities in industrial control modules from Danfoss and Copeland.

apnews

2026-10-13

Copeland, Dixell refrigeration systems also hacked, French cybersecurity agency says

2026-10-14

Cyberattacks Hit European Supermarket Chains, Disrupt Refrigeration Systems

Cyberattacks Hit European Supermarket Chains, Disrupt Refrigeration Systems

FAQ