The French Supermarket Attack: When Digital Threats Spoil Real Food

Are we still under the illusion that cyberattacks primarily target personal data or intellectual property? The recent events across France — and, as it turns out, parts of Belgium and the Netherlands — should unequivocally shatter that outdated notion. What unfolded in French supermarkets was not merely a data breach; it was a physical act of sabotage, executed digitally, with millions of euros in food literally melting or spoiling as a direct consequence. This incident serves as a chilling reminder that our increasingly interconnected world means digital vulnerabilities can now have immediate, tangible, and devastating impacts on our most fundamental physical infrastructures.

In the night between Sunday and Monday, an unprecedented cyberattack hit major French supermarket chains, including Coopérative U, E. Leclerc, Intermarché, Carrefour Market, Monoprix, and Netto. The targets were not their customer databases or financial systems, but rather the very backbone of their food preservation: the refrigeration and freezer systems. Hackers exploited vulnerabilities in remote management software, specifically from the Danish company Danfoss, to remotely manipulate temperatures. Reports indicate that systems were forced to defrost or even heated up to 50°C, rendering vast quantities of fresh and frozen produce unusable across hundreds of stores. Nearly 100 Coopérative U stores and around 300 Intermarché and Netto locations were impacted, with reports of losses such as €50,000 in frozen goods at an Intermarché in Haguenau and €220,000 in fresh and frozen items at an E. Leclerc in Wasselonne as reported by Corriere della Sera. Beyond the direct food spoilage, the attack also disrupted online grocery deliveries, loyalty programs, and caused electronic shelf labels to display incorrect prices. There were even reports from the Paris prosecutor’s office of incipient fires as reported by ComoZero. The incident extended beyond French borders, affecting the Belgian chain Delhaize and the Dutch group Albert Heijn according to Corriere della Sera. The Paris prosecutor’s office has since launched an investigation into what Dominique Schelcher, executive director of Cooperative U, described as an “extremely grave and unprecedented” attack as reported by Virgilio.

The Urgent Shift from Data Theft to Physical Sabotage

For too long, the public discourse around cybersecurity has largely focused on the abstract threat of data breaches. While the theft of personal information or corporate secrets certainly carries significant risks, this attack highlights a far more insidious and immediate danger: the weaponization of digital access to cause physical harm or disruption. When hackers can effectively