Cyberattack disabled Danfoss refrigeration systems in French supermarkets
Attackers hit Danfoss-managed cooling units in hundreds of French stores, raising temperatures to 50°C for roughly six hours on Sunday night.
Key points
- Cyberattacks targeted Danfoss-managed refrigeration systems across hundreds of French supermarkets on Sunday night.
- Temperatures inside the systems rose to 50°C for approximately six hours, disabling the cooling functions.
- Stores were forced to discard damaged food due to the loss of temperature control during the incident.
Cyberattacks targeted Danfoss-managed refrigeration systems across hundreds of French supermarkets on Sunday night, according to a report published by Techmeme citing Bloomberg. The attacks disabled the cooling units in these retail locations, leading to significant operational disruptions for the affected businesses.
The temperature inside the targeted refrigeration systems rose to 50°C for roughly six hours during the incident. This sustained heat exposure rendered the stored goods unsafe for sale. Consequently, the supermarkets involved were forced to throw out the damaged food items that had been compromised by the loss of cooling.
Technical Context and Impact
The incident highlights the vulnerability of industrial control systems to cyber interference. The attack specifically focused on Danfoss-managed systems, which are widely used in commercial refrigeration applications. By disabling these systems, the attackers caused the internal environment of the coolers to reach extreme temperatures.
The duration of the impact was approximately six hours. This timeframe was sufficient to raise the temperature to 50°C, a level that quickly spoils perishable goods. The widespread nature of the attack, affecting hundreds of stores, suggests a coordinated effort or a vulnerability present across many installations of the same system type.
Affected Entities
Hundreds of supermarkets in France were identified as the primary victims of this cyberattack. These retail locations rely on continuous refrigeration to maintain the safety and quality of their inventory. The simultaneous failure of these systems across multiple stores indicates a systemic issue rather than isolated incidents.
The financial impact on these stores is direct and immediate, as they must discard the inventory that was damaged by the heat. This results in significant waste and loss of revenue. The disruption also affects the availability of products for consumers, potentially causing short-term supply issues in the affected regions.
What should you do?
Security professionals should monitor for unusual activity in industrial control systems and refrigeration management networks. Organizations using Danfoss or similar industrial automation equipment should review their network segmentation and access controls. It is important to ensure that operational technology networks are isolated from corporate IT networks to limit the spread of potential attacks.
What to do and how to stay safe: Danfoss
- Review network segmentation between operational technology and corporate IT systems to limit lateral movement.
- Monitor industrial control systems for unauthorized access attempts or unusual temperature readings.
- Verify that remote access to refrigeration management software is secured with strong authentication methods.
- Develop incident response plans specifically for physical system failures caused by cyberattacks.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific systems were targeted in the French supermarket cyberattack?
The attack targeted Danfoss-managed refrigeration systems across hundreds of supermarkets in France.
How long did the refrigeration systems remain disabled?
The systems were disabled for roughly six hours, during which temperatures rose to 50°C.
What was the consequence for the supermarkets?
The stores were forced to throw out damaged food due to the loss of temperature control.
