{"data":{"id":"thr_spot_france_supermarket_refrigeration_cyberattack","actors":[{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"ANSSI"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Ahold Delhaize"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Carrefour"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Coopérative U"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Danfoss"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Danfoss refrigeration systems"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"E.Leclerc"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Fédération du Commerce et de la Distribution"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Intermarché / Les Mousquetaires"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Monoprix"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Paris prosecutor's office"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Prime Minister Sébastien Lecornu"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"Thierry Cotillard"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"retailers in Belgium, Luxembourg, Netherlands"},{"first":"2026-10-12","last":"2026-10-12","mentions":1,"name":"unidentified hackers"}],"briefs":[],"built_at":"2026-10-27T17:53:50.744000+00:00","coverage_series":[],"current":{"bottom_line":"Overnight 11-12 October hackers seized Danfoss refrigeration controllers in hundreds of French supermarkets and forced them to heat to 50C for about six hours, forcing mass disposal of fresh and frozen food. Losses are put at millions to tens of millions of euros in a single day, fires were reported, and the Paris prosecutor opened a cybercrime probe on 12 October while ANSSI investigates. No group has claimed responsibility as of 13 October; attribution remains unknown.","coverage":"","date":"2026-10-13","escalation":{"direction":"rising","pace":"fast"},"headline":"Hackers overheated refrigeration in hundreds of French supermarkets overnight, forcing mass food disposal and criminal probe","source":"daily","url":"/geopolitics/2026-10-13"},"days_covered":1,"domain":"geopolitics","escalation_history":[{"date":"2026-10-13","direction":"rising","pace":"fast"}],"figures":[{"label":"Carrefour supermarkets affected","series":[{"as_of":"2026-10-12","source":"https://www.bbc.co.uk/news/articles/crq5nzxv9q4yo?at_medium=RSS&at_campaign=rss","value":80}],"unit":"stores"},{"label":"estimated nationwide food losses in one day","series":[{"as_of":"2026-10-12","source":"https://www.thehindu.com/news/international/hackers-heat-french-supermarket-fridges-sparking-fires-and-spoiling-food/article71577848.ece","value":10000000}],"unit":"euros"},{"label":"peak temperature forced in refrigeration units","series":[{"as_of":"2026-10-12","source":"https://www.straitstimes.com/world/europe/hackers-hit-french-supermarkets-in-attack-disabling-fridges","value":50}],"unit":"°C"},{"label":"stores affected in France","series":[{"as_of":"2026-10-12","source":"https://www.dw.com/en/hundreds-of-french-supermarkets-hit-by-a-cyberattack-that-defrosted-refrigeration-systems/a-79646097?maca=en-rss-en-all-1573-rdf","value":400}],"unit":"stores"}],"first_seen":"2026-10-13","forecasts":[],"indicators":[],"inherited":[],"last_novel":"","last_seen":"2026-10-13","lineage":{"absorbed":[],"branches":[],"merged_into":null,"parent":null},"links":[{"date":"2026-10-13","link":"Russia-Ukraine war and European security architecture -> France supermarket refrigeration cyberattack: Both theaters show escalation against civilian infrastructure — Russian strikes on Ukrainian energy/civilian sites and reported Oct 13 Black Sea shipping and Starlink sabotage claims parallel the Oct 11-12 Danfoss hack that heated ~400 French supermarkets to 50C for six hours, though France attribution remains unknown as of Oct 13.","name":"Russia-Ukraine war and European security architecture","theater_id":"thr_russia_ukraine_war_and_european_security_archite"}],"name":"France supermarket refrigeration cyberattack","on_record":[],"places":[{"count":2,"country":"France","last_date":"2026-10-12","lat":46.2276,"lon":2.2137,"name":"France"},{"count":1,"country":"Netherlands","last_date":"2026-10-12","lat":52.3676,"lon":4.9041,"name":"Amsterdam"},{"count":1,"country":"France","last_date":"2026-10-12","lat":48.8566,"lon":2.3522,"name":"Paris"}],"primer":{"built_at":"2026-10-27T17:53:50.744000+00:00","text":"This theater concerns a cyberattack affecting supermarket refrigeration systems in France. No background information on the parties involved, how such attacks occur, or why refrigeration systems matter was provided in the materials supplied for this primer."},"pulses":[],"relations":[],"reports":[{"date":"2026-10-13","url":"/geopolitics/2026-10-13"}],"schema":"ohmega.dossier/1","state":"","statements":[{"quote":false,"role":"CEO, Intermarché","said":"Told BFM TV on 12 October the unprecedented attack would represent losses of tens of millions of euros nationwide in a single day.","source":"https://www.thehindu.com/news/international/hackers-heat-french-supermarket-fridges-sparking-fires-and-spoiling-food/article71577848.ece","when":"2026-10-12","who":"Thierry Cotillard"},{"quote":false,"role":"Danfoss (company statement)","said":"Aware of incidents in France affecting a limited number of refrigeration management systems running outdated firmware; had long advised customers to keep supported systems updated and migrate legacy systems.","source":"https://www.straitstimes.com/world/europe/hackers-hit-french-supermarkets-in-attack-disabling-fridges","when":"2026-10-12","who":"Danfoss"}],"theater_id":"thr_spot_france_supermarket_refrigeration_cyberattack","timeline":[{"date":"2026-10-12","detail":"Security issues were also reported in Belgium, Luxembourg and the Netherlands on 12 October, with Dutch retailer Ahold Delhaize taking refrigeration and other systems offline as precaution and suspending online grocery deliveries, while stating it saw no link to the French attacks. Analyst Felix Aimé (Sekoia) said Spain, Portugal, Poland, Germany and Belgium had also been affected, which remains unconfirmed. No group has claimed responsibility as of 12-13 October.","from":"/geopolitics/2026-10-13","headline":"Precautionary shutdowns in Benelux on 12 Oct; wider European spread claimed but unconfirmed and no attribution","sources":["https://www.dw.com/en/hundreds-of-french-supermarkets-hit-by-a-cyberattack-that-defrosted-refrigeration-systems/a-79646097?maca=en-rss-en-all-1573-rdf","https://www.thehindu.com/news/international/hackers-heat-french-supermarket-fridges-sparking-fires-and-spoiling-food/article71577848.ece","https://www.straitstimes.com/world/europe/hackers-hit-french-supermarkets-in-attack-disabling-fridges"],"verification":"researched","where":"Belgium, Luxembourg, Netherlands"},{"date":"2026-10-12","detail":"The Paris prosecutor's office on 12 October opened a specific cybercrime investigation into a large-scale attack on connected refrigerators in several major retailers. Prime Minister Sébastien Lecornu's office said Lecornu is personally monitoring, has tasked ANSSI to investigate and is liaising with European counterparts as other countries may be affected; a source close to Lecornu said ANSSI identified a vulnerability in Danfoss software and contacted the vendor. Danfoss said it was aware of incidents affecting a limited number of systems running outdated firmware and had long advised customers to keep supported systems updated and migrate legacy systems. The retail association called for full transparency from Danfoss and said some stores were already back up on 12 October.","from":"/geopolitics/2026-10-13","headline":"Paris prosecutor opened probe 12 Oct; PM tasked ANSSI and Danfoss acknowledged outdated firmware","sources":["https://www.dw.com/en/hundreds-of-french-supermarkets-hit-by-a-cyberattack-that-defrosted-refrigeration-systems/a-79646097?maca=en-rss-en-all-1573-rdf","https://www.bbc.co.uk/news/articles/crq5nzxv9q4yo?at_medium=RSS&at_campaign=rss","https://www.thehindu.com/news/international/hackers-heat-french-supermarket-fridges-sparking-fires-and-spoiling-food/article71577848.ece","https://www.straitstimes.com/world/europe/hackers-hit-french-supermarkets-in-attack-disabling-fridges","https://www.politico.eu/article/french-supermarkets-face-food-crisis-after-cyberattack-hits-refrigerators/"],"verification":"researched","where":"Paris, France"},{"date":"2026-10-12","detail":"On the night of 11-12 October 2026 hackers gained remote control of Danfoss refrigeration management software/controllers and forced units into defrost/heat mode, raising temperatures to as high as 50C (122F) for about six hours. Targeted hardware was older Danfoss models AK-SM 800 / AK-SM 800A and AK-SC 355 running outdated firmware that no longer receives security updates. Supermarket cold aisles are typically run by control panels managing all fridges/freezers in a store and accessible over the internet for remote maintenance.","from":"/geopolitics/2026-10-13","headline":"Hackers seized Danfoss controllers overnight 11-12 Oct and heated fridges to 50C for six hours","sources":["https://www.straitstimes.com/world/europe/hackers-hit-french-supermarkets-in-attack-disabling-fridges","https://www.dw.com/en/hundreds-of-french-supermarkets-hit-by-a-cyberattack-that-defrosted-refrigeration-systems/a-79646097?maca=en-rss-en-all-1573-rdf","https://www.bbc.co.uk/news/articles/crq5nzxv9q4yo?at_medium=RSS&at_campaign=rss","https://www.thehindu.com/news/international/hackers-heat-french-supermarket-fridges-sparking-fires-and-spoiling-food/article71577848.ece"],"verification":"researched","where":"France"},{"date":"2026-10-12","detail":"About 400 stores out of about 15,000 supermarkets in France were affected. Intermarché reported about 150 stores hit (180 including Netto) and urgently disconnected another ~100 stores from the internet to prevent spread; Carrefour reported 80 of 6,000 sites; Monoprix about 5% of its ~400-490 stores; Coopérative U fewer than 100 to more than 100 (reports vary); E.Leclerc several stores via a refrigeration supplier. All impacted fresh and frozen products had to be discarded for health reasons, with fires reported at some locations from overheating units. Intermarché CEO Thierry Cotillard told BFM TV on 12 October losses would be tens of millions of euros nationwide in a single day.","from":"/geopolitics/2026-10-13","headline":"About 400 stores hit across major chains, forcing discard of all chilled food and causing fires","sources":["https://www.dw.com/en/hundreds-of-french-supermarkets-hit-by-a-cyberattack-that-defrosted-refrigeration-systems/a-79646097?maca=en-rss-en-all-1573-rdf","https://www.bbc.co.uk/news/articles/crq5nzxv9q4yo?at_medium=RSS&at_campaign=rss","https://www.thehindu.com/news/international/hackers-heat-french-supermarket-fridges-sparking-fires-and-spoiling-food/article71577848.ece","https://www.straitstimes.com/world/europe/hackers-hit-french-supermarkets-in-attack-disabling-fridges"],"verification":"researched","where":"France"}],"cite_as":"https://ohmega.monster/situations/thr_spot_france_supermarket_refrigeration_cyberattack","api_url":"https://ohmega.monster/api/v1/theaters/thr_spot_france_supermarket_refrigeration_cyberattack"},"meta":{"as_of":"2026-10-27T17:53:50.744000+00:00","source":"ohmega.dossier/1","version":"v1","cite_as":"https://ohmega.monster/situations/thr_spot_france_supermarket_refrigeration_cyberattack","license":"Ohmega claims, summaries, grades, Pulses and forecasts may be quoted with a link to cite_as. Source texts belong to their publishers; follow the source URLs. No warranty: readings are our assessment as of as_of, not guarantees.","note":"timeline[] and on_record[] items carry their own verification and source URLs."}}