Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted - Help Net Security
European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned by Dutch multinational Ahold Delhaize have been dealing with disruption resulting from an unspecified .
European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned by Dutch multinational Ahold Delhaize have been dealing with disruption resulting from an unspecified “security issue”.
between several service providers in the refrigeration sector, including Axima, a specialist in the installation and maintenance of refrigeration equipment, and Danfoss, a supplier of the regulation systems affected by the attack.” Jonathan Le Borgne, the creator of Je Bosse En Grande Distribution, a podcast and blog focusing on topics related to the French grocery retail business, confirmed that the hackers took control of the (remotely controllable) Danfoss refrigeration control systems.
He also highlighted that refrigeration systems are “essential to preserving fresh products and supplying food to the French public” and said this attack is “of utmost gravity, unprecedented [and] unacceptable." Speaking to Infosecurity , an Intermarché spokesperson confirmed that 150 of its stores were affected by the cyber-attack, estimated the financial loss at "at least thousands of euros." Meanwhile, a Carrefour spokesperson said the incident "primarily affected 80 out of our 6000 stores" and Groupe Casino said 5% of Monoprix supermarkets are impacted by the attack.
French news channel BFMTV reported today that hundreds of stores across the country were affected by a cyberattack on the refrigeration control systems manufactured by Danish company Danfoss.
In a post on X published on October 12, Dominique Schelcher, CEO of Cooperative U, confirmed the cyber-attack affected several stores in the network from October 11.
Apparently, the control systems were hijacked remotely by attackers on Sunday night and early Monday morning.
According to the news outlet, many shops run by Groupement Mousquetaires (Intermarché, Netto), Coopérative U (Super U, Marché U), and Leclerc were affected and have suffered damage reaching tens or even hundreds of thousands of euros.
He also said Carrefour Market and Monoprix stores were affected.
In early August 2026, security researchers with Claroty’s Team82 disclosed multiple vulnerabilities affecting the web-based management interfaces of Danfoss AK-SM 800A refrigeration controllers and Copeland XWEB Pro supervisory controllers .
Both vendors have since released updated firmware that fixed the vulnerabilities.
What happened
European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned by Dutch multinational Ahold Delhaize have been dealing with disruption resulting from an unspecified “security issue”.
between several service providers in the refrigeration sector, including Axima, a specialist in the installation and maintenance of refrigeration equipment, and Danfoss, a supplier of the regulation systems affected by the attack.” Jonathan Le Borgne, the creator of Je Bosse En Grande Distribution, a podcast and blog focusing on topics related to the French grocery retail business, confirmed that the hackers took control of the (remotely controllable) Danfoss refrigeration control systems.
What changed
He also highlighted that refrigeration systems are “essential to preserving fresh products and supplying food to the French public” and said this attack is “of utmost gravity, unprecedented [and] unacceptable." Speaking to Infosecurity , an Intermarché spokesperson confirmed that 150 of its stores were affected by the cyber-attack, estimated the financial loss at "at least thousands of euros." Meanwhile, a Carrefour spokesperson said the incident "primarily affected 80 out of our 6000 stores" and Groupe Casino said 5% of Monoprix supermarkets are impacted by the attack.
French news channel BFMTV reported today that hundreds of stores across the country were affected by a cyberattack on the refrigeration control systems manufactured by Danish company Danfoss.
Who is affected
In a post on X published on October 12, Dominique Schelcher, CEO of Cooperative U, confirmed the cyber-attack affected several stores in the network from October 11.
Apparently, the control systems were hijacked remotely by attackers on Sunday night and early Monday morning.
Why it matters
According to the news outlet, many shops run by Groupement Mousquetaires (Intermarché, Netto), Coopérative U (Super U, Marché U), and Leclerc were affected and have suffered damage reaching tens or even hundreds of thousands of euros.
He also said Carrefour Market and Monoprix stores were affected.
Technical details
In early August 2026, security researchers with Claroty’s Team82 disclosed multiple vulnerabilities affecting the web-based management interfaces of Danfoss AK-SM 800A refrigeration controllers and Copeland XWEB Pro supervisory controllers .
Both vendors have since released updated firmware that fixed the vulnerabilities.
Some of these flaws could allow attackers to hijack the devices and through them interfere with the refrigeration infrastructure they are used to manage, but it’s currently unknown whether they have been exploited in these latest attacks.
Response
An investigation will be needed to shed full light on this attack,” he said.
What remains unknown
Some of these flaws could allow attackers to hijack the devices and through them interfere with the refrigeration infrastructure they are used to manage, but it’s currently unknown whether they have been exploited in these latest attacks.
Attribution
Help Net Security: European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at stores owned by Dutch multinational Ahold Delhaize have been dealing with disruption resulting from an unspecified “security issue”.
Infosecurity Magazine: Affected companies include Coopérative U, a retail cooperative encompassing supermarkets branded as Hyper U, Super U, U Express and Utile, Groupement Mousquetaire's Intermarché and Carrefour.
What to watch next
Watch for updated vendor guidance and fixed-version details.