The Grocery Store Hack Nobody Saw Coming

Supermarket refrigerated display cases with drinks, produce, and prepared foods
Photo: Hitra / Shutterstock

Hackers broke into French supermarket refrigeration systems and cranked the temperature up to 122 degrees Fahrenheit, spoiling food and sparking fires at hundreds of stores overnight.

Story Snapshot

  • France’s cyber-emergency team confirmed widespread hacks of Danfoss refrigeration systems used by major supermarket chains.
  • Units at roughly 150 Les Mousquetaires stores hit 50°C (122°F) for six hours, destroying food stock.
  • Hackers reportedly stretched the defrost cycle from one hour to eight hours, delaying alarms that should have warned staff.
  • France’s prime minister ordered the national cybersecurity agency to investigate what prosecutors called a “large-scale” attack.
  • Danfoss says much of the targeted gear was outdated equipment no longer getting security updates.

Coordinated Attack Hits Food Supply Chain

France’s governmental computer emergency response team confirmed it was tracking “numerous compromises” of Danfoss systems that run refrigeration at supermarkets, convenience stores, and cold-storage warehouses. The hack wasn’t limited to one chain. Major French retailers across the country reported the same failure at roughly the same time, pointing to a shared vulnerability rather than a single broken fridge.

The Paris prosecutor’s office called it a “large-scale” cyber assault hitting connected refrigeration units at several big food retailers. That’s not a guess from a nervous store manager. That’s French law enforcement putting its name on the word “attack.”

Food Spoiled As Temperatures Spiked

Les Mousquetaires, the company behind Intermarché, said refrigeration units at about 150 of its stores spiked to 50°C and stayed there for six hours overnight. That’s hot enough to ruin an entire night’s worth of frozen and refrigerated inventory. The British Broadcasting Corporation (BBC) separately confirmed the same 50°C reading, and multiple outlets repeated the figure, giving the public a consistent, specific number rather than vague talk of “a malfunction.”

This wasn’t just the power flipping off. French newspaper Le Monde reported that hackers changed the defrosting system’s target temperature to 50°C and stretched the defrost cycle from one hour to eight hours, which delayed the alarms that would normally have alerted workers. That’s a deliberate reprogramming of equipment settings, not a blown fuse or a tripped breaker.

Outdated Equipment Opened the Door

French officials and AFP pointed to Danfoss AK-SM800 and AK-SC355 control systems as the likely entry point. Danfoss itself admitted most of the affected equipment was “legacy” gear that “no longer receive software or security updates”. In plain terms, grocery chains across France were running critical cold-storage controls on old, unpatched technology connected to the internet, and nobody closed the gap before hackers found it.

Prime Minister Sebastien Lecornu ordered France’s National Cybersecurity Agency to investigate, and the Paris prosecutor’s office is treating this as a large-scale criminal attack rather than a routine equipment glitch. Reports describe spoiled food, fire risk, and at least some fire incidents tied to the overheated systems. No group has publicly claimed responsibility, and officials have not named a specific hacker or nation behind the intrusion.

A Warning for America’s Own Grocery Shelves

This is the exact nightmare that security experts have warned about for years: critical infrastructure, from power grids to grocery store freezers, quietly running on old industrial computers nobody bothered to update, wide open to anyone who finds the right digital key. France just lived it. Food got tossed, fires got started, and shoppers got left wondering if their own supermarket could be next.

American grocery chains rely on the same kinds of connected refrigeration systems now under scrutiny in France. This should be a wake-up call for store owners and regulators here at home to audit their own cold-storage networks before a hostile actor does it for them. President Trump’s administration has made hardening critical infrastructure against foreign cyber threats a stated priority, and incidents like this one in France make the case louder than any briefing paper could.

Globalism and connected supply chains have brought convenience, but they’ve also handed bad actors a bigger attack surface than ever before. A grocery store fridge used to be just a fridge. Now it’s a computer that someone overseas can reach into and turn into an oven. Families who count on their local supermarket to keep food safe deserve better protection than outdated software running on autopilot.

Sources:

youtube.com, bbc.com, dw.com, afp.com, cnn.com, lemonde.fr