Oct 14, 2026
Cyberattack Disrupts French Supermarkets, Targeting Smart Refrigeration Systems
A recent cyberattack has prompted French supermarkets to take urgent measures to safeguard their refrigeration systems, affecting the stock of chilled food across numerous stores. The French Computer Emergency Response Team (CERT-FR) issued a warning advising supermarkets to disconnect any refrigeration control systems that have a public IP address from the internet. This recommendation comes after a significant cyber incident that primarily impacted the Danfoss AK-SC and AK-SM series refrigeration controllers, which are widely used in the industry. One of the most affected chains, Groupement Mousquetaires, which operates Intermarché and Netto brands, had to remove products from its fresh and frozen food display units due to the attack's consequences.
What changed
The CERT-FR's guidance includes updating firmware, adjusting security settings to 'strict,' and changing default passwords to enhance the security of these systems. In a bid to mitigate immediate risks, supermarkets may filter connections to allow only authorized IP addresses from refrigeration suppliers, although this is not seen as a sustainable long-term solution. The incident serves as a stark reminder of the vulnerabilities present in increasingly connected devices within the food retail sector.
Who is affected
The attack has raised alarms about the cybersecurity posture of operational technology in retail environments, highlighting the need for robust security measures. The incident not only affects the immediate stock of perishable goods but also poses broader implications for supply chain integrity and consumer trust. As the threat landscape continues to evolve, stakeholders in the food industry are urged to reassess their cybersecurity strategies to prevent similar incidents in the future.
What it means
In a statement reflecting on the incident, Dixell, a control systems vendor, emphasized that cybersecurity is a shared responsibility among all players in the industry. The attack underscores the interconnected nature of modern retail operations and the potential ripple effects that can occur when one segment is compromised. As supermarkets work to recover from this incident, the focus will likely shift towards strengthening defenses against future cyber threats.