A massive cyberattack targeted the refrigeration systems of multiple French supermarket chains on October 12, causing widespread disruptions and significant financial losses. The attack affected hundreds of stores, including major chains like Leclerc, Système U, Monoprix, Carrefour, and Les Mousquetaires, which operates Intermarché and Netto supermarkets. The breach allowed hackers to remotely access and control the thermostats of connected refrigerators and freezers.
The consequences of the attack were severe, with temperatures in refrigerators and freezers soaring to over 40 degrees Celsius, far exceeding the normal operating range of -18 to -19 degrees Celsius. As a result, employees were forced to discard dozens of kilograms of perishable goods, including yogurt, meat, and frozen foods. The destruction of these products has been estimated to be in the thousands of euros, with one store in Issy-les-Moulineaux reporting a loss of 55,000 euros.
The cyberattack has been attributed to a vulnerability in the refrigeration management system provided by Danfoss, a third-party vendor. According to Danfoss, the majority of affected units were older models that had reached the end of their lifespan and no longer received software updates or security patches. This made them more susceptible to hacking.
The French authorities have launched an investigation into the cyberattack, with the Paris prosecutor's office working to identify the perpetrators. The attack has raised concerns about the security of critical infrastructure and the potential for similar breaches in the future. In response, some stores have opted to disconnect their refrigeration systems from the internet to prevent further attacks.
The impact of the cyberattack has been felt across France, with scenes of destruction and disruption reported in multiple cities, including Paris, Poitiers, and Lyon. Customers have expressed shock and concern about the vulnerability of modern technology and the potential for hackers to disrupt essential services.
The Les Mousquetaires group, which operates Intermarché and Netto supermarkets, has been particularly hard hit, with 300 of its stores affected by the attack. The company has taken steps to mitigate the damage and prevent future breaches, including disconnecting its refrigeration systems from the internet.
As the investigation into the cyberattack continues, French authorities are working to assess the full extent of the damage and identify measures to prevent similar breaches in the future. The incident serves as a reminder of the importance of robust cybersecurity measures and the need for companies to prioritize the security of their critical infrastructure.
Key points
- Hundreds of French supermarkets were affected by a cyberattack that disabled their refrigeration systems, causing significant financial losses and destruction of perishable goods.
- The attack has been attributed to a vulnerability in the refrigeration management system provided by Danfoss, which affected older models that had reached the end of their lifespan.
- The French authorities have launched an investigation into the cyberattack, with the Paris prosecutor's office working to identify the perpetrators.