Key points
- Attackers forced Danfoss controls to run at 50 degrees Celsius continuously.
- French chains Intermarché, Leclerc, and Coopérative U confirmed the incident.
- Dutch retailers Albert Heijn and Etos suspended websites and loyalty programs.
A cyberattack has disrupted refrigeration controls and pricing systems at major supermarket chains across Europe, according to La Dépêche. The incident involves the manipulation of Danfoss-made hardware, forcing units into continuous defrost cycles at 50 degrees Celsius. This temperature spike threatens perishable inventory while electronic shelf labels fail to update prices correctly.
How it unfolded
- Sunday afternoon: NOS reports Dutch chains Albert Heijn, Etos, and Gall & Gall experienced malfunctions linked to a cybersecurity incident.
- Monday morning: Coopérative U president Dominique Schelcher confirms the attack hit refrigeration facilities since the previous night.
- Ongoing: French retailers Intermarché and Leclerc are among those targeted by the cyberattack.
Who is affected
French retailers Intermarché, Leclerc, and Coopérative U have been targeted by a cyberattack hitting Danfoss refrigeration controls, according to La Dépêche. Dominique Schelcher, president of Coopérative U, described the incident as extremely serious. He stated that teams were mobilized to address the issue. Sources described a wave of heat escaping from freezers as the automatic defrost function, normally limited to two hours, ran continuously.
View the original post on X
What happens next
Early estimates suggest losses are approaching 300,000 euros, with potential nationwide costs reaching several million euros, according to initial reports. In the Netherlands, Albert Heijn took preventive measures including the temporary shutdown of certain systems. The chain impacted delivery services and loyalty programs were also impacted by the incident. It remains unclear if the French and Dutch incidents are related or how widespread the attack is.
What to do and how to stay safe: Danfoss
- Isolate industrial control systems from general IT networks to prevent lateral movement.
- Verify physical temperature logs against digital control system readings for discrepancies.
- Audit electronic shelf label management systems for unauthorized configuration changes.
- Monitor vendor advisories for updates on Danfoss refrigeration control vulnerabilities.
Step-by-step guide: Mobile Device Security for Small Business: Control Without Cost
General security guidance from the Circuit Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which specific refrigeration controls were targeted in this attack?
The attack targeted Danfoss-made refrigeration controls used by French supermarkets Intermarché, Leclerc, and Coopérative U.
Did the attackers encrypt data or demand ransom?
The source material does not mention ransom demands or data encryption, only the manipulation of defrost cycles and pricing systems.
Are the attacks in France and the Netherlands linked?
It is unclear at this stage whether the attacks affecting French and Dutch retailers are related.
