Devices and control systems: Retail (shop), France 2026
During the night before 12 October 2026, attackers switched the refrigeration and freezer systems of around 150 Intermarché branches, 80 Carrefour sites and Coopérative U shops to defrost mode; for around six hours the temperature rose to as much as 50 degrees.
- Incident · 10.2026 · all of France, France
- Evidence: confirmed by an authority
- Devices and control systems
As of
What happened
Meat, frozen goods and vegetables had to be disposed of; according to Reuters (quoted by heise), there were fires in several shops. The Paris public prosecutor’s office and the cyber agency ANSSI are investigating; the French authority CERT-FR reports numerous compromised refrigeration control systems and names devices from Danfoss, Copeland and Dixell as affected.
- Affected
- Intermarché, Coopérative U, Carrefour (more than 230 branches)
- Industry
- Retail (shop)
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- no / no
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Internet-accessible remote controls of the refrigeration systems (including older Danfoss AK-SM 800 and AK-SC 355 without security updates)
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Property damage caused by an attack
Spoiled goods, damaged machine
Mostly not covered 0 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Refrigeration control systems with internet access and without updates are a mass target; a single vulnerability hits hundreds of shops in one night.
Sources
- Cyberangriff auf französische Supermarkt-Kühlschränke: Hunderte Waren verdorben (opens in a new window) heise online · 2026-10-12
- CERTFR-2026-ALE-012: Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération (opens in a new window) CERT-FR (ANSSI) · 2026-10-12, aktualisiert 13. und 16.10.2026
«Des campagnes d'attaques sont probablement toujours en cours visant ces équipements.»