Supermarket chains across France, Belgium and the Netherlands have reportedly faced cyberattacks targeting refrigeration and retail systems. The attacks allegedly manipulated cooling equipment, triggering defrosting cycles and raising temperatures to 50°C. The incidents reportedly caused food spoilage and disrupted supermarket operations.
Read More: UAE records 640,000 cyberattacks in one day
French retailers Intermarché, E. Leclerc and Coopérative U confirmed they were affected, according to the report. Intermarché said around 150 stores experienced disruptions, with refrigeration units heated for approximately six hours. The company reportedly had to discard fresh and frozen products to prevent potential food safety risks. Coopérative U chief executive Dominique Schelcher described the targeting of food preservation equipment as extremely serious and unprecedented.
Paris prosecutors confirmed a large-scale cyberattack, while Prime Minister Sébastien Lecornu instructed France’s cybersecurity agency, ANSSI, to investigate. The agency identified a vulnerability involving software supplied by Danish company Danfoss, according to the report. Danfoss said affected units were running outdated firmware and urged customers to update their systems.
The disruption reportedly extended beyond refrigeration equipment. Electronic shelf labels and delivery systems also experienced problems. In the Netherlands, supermarkets operated by Ahold Delhaize, including Albert Heijn, Etos and Gall & Gall, faced a separate reported security issue. Belgian Delhaize stores also experienced disruptions, although authorities had not confirmed whether these incidents were connected.
Read More: Asos shares fall 12% after customers receive hacked alert
EU Commissioner for Food and Agriculture Christophe Hansen condemned the reported attacks and called for greater attention to food security. Initial losses were estimated at around €300,000, with the overall financial impact potentially reaching millions of euros. The incidents have raised concerns about internet-connected retail infrastructure and outdated software. Investigators must establish the full scope, causes and links between the reported disruptions.