Hackers Take Control of Supermarket Refrigeration Systems in France
October 16, 2026 | Threat Board | Cybersecurity
Hundreds of French supermarkets experienced a cyberattack on October 11, 2026, after hackers gained control of refrigeration systems, raising temperatures as high as 50°C and forcing some stores to discard food.
The attack affected major retailers, including Intermarché, Carrefour, Monoprix and Coopérative U, demonstrating how a cybersecurity breach can cause physical damage and disrupt business operations.
How Did the Attack Happen?
Attackers compromised remotely managed refrigeration controllers, including systems manufactured by Danfoss.
The affected controllers allowed remote management of refrigerators and freezers. Once compromised, attackers could manipulate operating settings and trigger defrost cycles.
Many affected devices were older models that no longer received security updates, leaving businesses exposed to potential vulnerabilities.
French cybersecurity authorities have also identified compromised Copeland xweb and Dixell xweb systems.
The exact method attackers used to gain access remains under investigation.
Why Should Businesses Be Concerned?
This incident highlights a growing cybersecurity risk: connected operational equipment can become a target for cybercriminals.
Businesses increasingly rely on internet-connected systems to manage equipment, facilities and day-to-day operations.
When these systems lack proper security, the consequences can extend beyond stolen information.
Potential impacts include:
- Operational downtime: Critical equipment may become unavailable.
- Financial losses: Damaged inventory, repairs and interrupted operations can create significant costs.
- Outdated technology: Unsupported devices may remain vulnerable to cyberattacks.
- Third-party exposure: Remote access provided to contractors can introduce additional security risks.
What Can Businesses Do to Protect Themselves?
The French cybersecurity agency CERT-FR recommends several measures to reduce exposure:
- Restrict remote access: Remove direct internet access to equipment controllers and use secure VPN connections where remote management is necessary.
- Update systems: Apply available firmware updates and replace unsupported equipment.
- Strengthen authentication: Change default passwords and review user accounts and access permissions.
- Review network security: Separate operational equipment from general business networks wherever possible.
- Monitor critical systems: Regularly review equipment settings and watch for unauthorized changes.
Businesses should also work with their equipment suppliers and IT providers to identify systems that may be vulnerable.
Britec Helps Keep Your Business Protected
Cybersecurity is no longer limited to computers, servers and email. Connected equipment and operational systems also require proper protection.
With proactive monitoring, network security and managed IT services, Britec helps businesses identify vulnerabilities, reduce risks and protect their operations.
Is your business technology properly secured? Talk to a Britec Expert.
Sources:
