SituationLiving fileFrance supermarket refrigeration cyberattackgeopolitics
Hackers overheated refrigeration in hundreds of French supermarkets overnight, forcing mass food disposal and criminal probe
As of 13 Oct · daily
Every day on file
Last report 18 days ago1 day from the Daily, newest first. The latest is open here with their pictures and numbers; earlier days open in their Daily.
Tue, 13 Oct 2026 · day's report → rising, fast pace
Hackers overheated refrigeration in hundreds of French supermarkets overnight, forcing mass food disposal and criminal probe
French supermarkets rely on internet-connected control panels, often Danish-made Danfoss systems, to run all fridges and freezers in a store and allow remote maintenance. Older models running outdated firmware that no longer receives security updates have known vulnerabilities, making the food cold chain exposed to cyberattacks that can spoil large volumes of food at once and affect prices and resilience beyond a single retailer.
Base map: Natural Earth (public domain). Locations: Ohmega, from today's developments; approximate. Interactive basemap: OpenFreeMap, © OpenMapTiles, data © OpenStreetMap contributors.
- 12 Oct1
- 2
- 3
Assessment and what changed · the full read, since yesterday
Overnight 11-12 October hackers seized Danfoss refrigeration controllers in hundreds of French supermarkets and forced them to heat to 50C for about six hours, forcing mass disposal of fresh and frozen food. Losses are put at millions to tens of millions of euros in a single day, fires were reported, and the Paris prosecutor opened a cybercrime probe on 12 October while ANSSI investigates. No group has claimed responsibility as of 13 October; attribution remains unknown.
More developments (1)
- 12 Oct4
Numbers and actors · statistics, flows and rates
Who they are · size
Balance sheet · debt, budget, current account, reserves
Annual statistics: latest year on record for each figure (IMF figures for this year are estimates), bars on one scale per column, line = the last ten years. Tap an actor for every year, rank, energy, ranked trade and sources. All actors →
Outlook, watch list and background
- ANSSI findings on the specific Danfoss vulnerability exploited and whether a patch or disconnect order is issued
- Danfoss and retailer updates on how many stores remain offline, restocking timelines, and any price or shortage signals
- Confirmation or denial of linked incidents in Belgium, Netherlands, Luxembourg and other countries cited by analysts
- 9 Aug 2026On 9 August 2026 Claroty's Team82 published research detailing vulnerabilities in Danfoss AK-SM 800A controllers that could allow bypassing authentication and executing code, which Danfoss addressed with software updates. Shows the specific controller family now exploited had known, patchable flaws before the October attack, and that outdated firmware remained in use. straitstimes.com ↗
- 1 Sept 2026In September 2026 President Emmanuel Macron instructed the government to prepare a plan to protect critical infrastructure and defence industrial base against drone and cyberattacks, citing intensifying hostile actions from Russia. Frames why French authorities treated a food-supply cyberattack as national-security critical infrastructure, not just retail disruption. straitstimes.com ↗
- 1 Aug 2026In August 2026 Britain's National Cyber Security Centre warned hackers were increasingly seeking to cause physical disruption targeting operational technology across multiple sectors globally, linked in part to geopolitical instability. Indicates the tactic — using cyber to cause physical effects in operational technology — was already flagged as a rising global risk. straitstimes.com ↗
- 25 Aug 2026In late August 2026 similar disruptions affecting refrigeration and causing food losses were reported at about a dozen US military commissaries. Suggests the French incident may not be isolated and that refrigeration systems elsewhere have shown similar failure modes. thehindu.com ↗
Base map: Natural Earth (public domain). Locations: Ohmega, from today's developments; approximate. Interactive basemap: OpenFreeMap, © OpenMapTiles, data © OpenStreetMap contributors.
researched reported · Most reported: France ×2, Amsterdam, Paris
Background in 60 seconds
written 27 OctThis theater concerns a cyberattack affecting supermarket refrigeration systems in France. No background information on the parties involved, how such attacks occur, or why refrigeration systems matter was provided in the materials supplied for this primer.
Who is doing what to whom
15 actors in play; no relations recorded yet.
- ANSSI 1 mention
- Ahold Delhaize 1 mention
- Carrefour 1 mention
- Coopérative U 1 mention
- Danfoss 1 mention
France and Netherlands, by the numbers
Every bar in a row is on that row's one scale. Latest year available for each figure; sources on each actor's page.
Attacks reported
attack log →≥ 291 events in or near its main states, last 30 days reported by the sources; the strongest are listed. No source sees every attack.
- 2026-10-30 · Assault or killing · Hardelot, Nord-Pas-de-Calais, France · GDELT ↗ · machine-coded
- 2026-10-30 · Armed clash · Hardelot, Nord-Pas-de-Calais, France · GDELT ↗ · machine-coded
- 2026-10-30 · Armed clash · Paris, France (general), France · GDELT ↗ · machine-coded
- 2026-10-30 · Armed clash · Fos-Sur-Mer, Provence-Alpes-Côd'Azur, France · GDELT ↗ · machine-coded
The numbers
4 figures tracked.
Where it's heading
Linked situations
- Russia-Ukraine war and European security architecture Russia-Ukraine war and European security architecture -> France supermarket refrigeration cyberattack… 13 Oct
Daily reports that covered it
Rebuilt 2026-10-27, and again as new reports land.