French supermarkets targeted by cyber-attack on refrigeration systems

Several supermarket chains in France have reportedly been impacted by a cyber-attack that targeted refrigeration facilities across numerous stores nationwide, according to Infosecurity Magazine.

The attack, which began on October 11, affected multiple retailers, including Coopérative U, Intermarché, E. Leclerc, Carrefour, and Monoprix. The compromised systems are believed to be administered by Danish refrigeration provider Danfoss, with attackers reportedly exploiting outdated versions of their control software. This allowed them to remotely trigger forced defrost cycles, causing temperatures to rise significantly and leading to the destruction of fresh produce. In one instance, two supermarkets in Haguenau reported losses of €270,000 ($302,000) worth of merchandise.

This incident highlights the critical security risks associated with industrial refrigeration systems, especially when connected to the internet without adequate safeguards. Previous research has identified vulnerabilities in Danfoss controllers that could allow attackers to manipulate physical equipment and conceal failures in the cold chain.

Source: Infosecurity Magazine

Written by

Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.