French Stores Hit by Cyberattack: Danfoss Fridges Forced Into 50C Defrost Cycles
Cyberattack disrupts refrigeration units and electronic shelf labels across multiple European retail chains, causing significant operational and financial damage.
Key points
- Danfoss refrigeration controls in French stores were forced into continuous 50C defrost cycles.
- Dutch retailers Albert Heijn and Etos took websites offline to contain the incident.
- Financial losses are estimated at 300,000 euros so far, potentially reaching millions.
Attackers have disrupted refrigeration control systems at major supermarket chains across Europe, forcing units into continuous defrost cycles at 50 degrees Celsius, according to La Dépêche. The incident also impacted delivery services and electronic shelf labels, disrupting in-store pricing for multiple retailers.
Which retailers and systems are affected?
French supermarkets Intermarché, Leclerc, and Coopérative U use Danfoss-made controls that were targeted in the attack. Dominique Schelcher, president of Coopérative U, confirmed on Monday morning that the cyberattack affected refrigeration production facilities in several stores since the previous night. He described the incident as extremely serious.
View the original post on X
What specific damage has occurred?
The attack configured automatic defrosting functions, which normally run for two hours daily, into continuous forced cycles. Sources reported a wave of heat escaping from freezers and fridges. Early estimates place losses near 300,000 euros, with potential nationwide costs reaching several million euros.
Are other regions experiencing similar issues?
NOS reported that Dutch chains Albert Heijn, Etos, and Gall & Gall experienced malfunctions on Sunday afternoon due to a cybersecurity incident. Albert Heijn stated it took preventive measures, including temporarily shutting down systems. Belgium’s Delhaize chain, owned by Albert Heijn, also reported disruptions, though it is unclear if the attacks are related.
What is the current status of the response?
Teams have been mobilized to address the refrigeration issues, and investigations are underway. Albert Heijn noted that part of its response involved protecting its IT environment through system shutdowns. It remains unclear how widespread either attack is or whether the French and Dutch incidents are connected.
What to do and how to stay safe: Danfoss
- Isolate industrial control systems from general IT networks to limit lateral movement.
- Monitor electronic shelf label networks for unusual configuration changes or data loss.
- Verify backup integrity for critical operational systems before attempting restoration.
- Review access logs for refrigeration control interfaces to identify unauthorized changes.
Step-by-step guide: Browser Security Settings for Small Business Teams
General security guidance from the TechSec Feed newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which specific hardware was compromised in the European supermarket attacks?
Danfoss-made refrigeration controls were targeted in French supermarkets, while Dutch retailers reported broader IT and shelf label disruptions.
How much financial damage has been reported so far?
Early reports indicate losses approaching 300,000 euros, with estimates suggesting nationwide costs could reach several million euros.
Is there a confirmed link between the French and Dutch incidents?
It is currently unclear whether the attacks on French retailers and Dutch chains like Albert Heijn are related.
