A cyberattack overnight on 11 October disrupted cold storage at hundreds of French supermarkets, with fresh food spoiling after attackers remotely triggered the defrost function on store refrigeration controllers. French broadcaster BFMTV reported that about 300 Intermarché and Netto stores and fewer than 100 Coopérative U stores were affected. Coopérative U chief executive Dominique Schelcher confirmed a cyberattack on the stores' cold-production facilities and called targeting "equipment essential to the preservation of fresh products… of extreme gravity and unprecedented". The affected controllers are reportedly made by Danish manufacturer Danfoss, with attackers targeting older software versions, though Danfoss has not confirmed its systems were the target. France's ANSSI said it was mobilised to handle the incident nationally and to coordinate at European level. Researchers previously flagged weaknesses in Danfoss refrigeration controllers (CISA ICSA-25-140-03; Claroty Team82 showed a compromised controller could switch off cooling while reporting normal temperatures), with roughly 2,700 devices exposed to the internet; it is unclear whether those flaws were used.

• Source article