Jump to content

User:Louis/French supermarket refrigeration controller cyberattack (2026)

From Consumer Rights Wiki

Overnight on October 11 to 12, 2026, hackers took control of refrigeration in hundreds of French supermarkets,[1][2] and Intermarché's head said its fridges were remotely heated up to 50°C.[3][4] Intermarché said stores would be forced to throw out the affected fresh and frozen food,[5] and that insurance policies not covering this type of incident would be one of the sticking points.[3]

Many supermarket refrigeration control panels are connected to the internet so that maintenance companies can reach them remotely,[6] but as of October 15, 2026, how the attackers got in was still unclear.[7] The French Computer Emergency Response Team (CERT-FR)[8] wrote that "De manière générale l'exposition d'une interface de gestion sur Internet est contraire aux bonnes pratiques" (in English: generally, leaving a control screen open to the internet goes against good practice).[9]

Display cases forced into defrost

[edit | edit source]

If display cases are not regularly defrosted, Danfoss, a Danish manufacturer, explains, ice can build up, the air flow is restricted or stops altogether, and cooling is reduced and inefficient.[10] French technology site Les Numériques wrote that refrigeration installations defrost themselves automatically, "par exemple 2 h par tranche de 24 h" (in English: for example, 2 hours in every 24), to clear the frost.[11] Danfoss also warns that too many defrost cycles performed for too long can harm food quality.[10]

In the night of Sunday October 11 to Monday October 12, 2026, "des hackers ont pris le contrôle de ce qu'on appelle la régulation du froid" (in English: hackers took control of what is called refrigeration control), Dominique Schelcher, chief executive of Coopérative U, recalled on French radio station RTL on October 13.[1] According to Agence France-Presse (AFP), major French supermarket chains said on Monday that they had been hit by a cyberattack that caused the temperature of their refrigerators to shoot up in hundreds of stores.[2]

French Finance Minister Roland Lescure told Parliament on Tuesday, October 13, 2026, that about 700 of the country's 10,000 supermarkets were affected, according to the Associated Press (AP).[12]

Thierry Cotillard, head of Groupement Mousquetaires, which owns the Intermarché chain,[13] said on French news channel BFMTV on the evening of Monday October 12 that the attackers had managed remotely "à mettre en dégivrage tous nos meubles froids" and "à les monter en température jusqu'à 50 degrés" (in English: to put all our refrigerated cases into defrost; to raise their temperature up to 50°C).[3]

Newspaper Le Monde reported that the attackers had raised the temperature of the defrost system in freezers and cold rooms to 50°C and stretched the operation from one hour to eight hours "afin que les alarmes se déclenchent tardivement" (in English: so that the alarms would go off late).[14]

In Rennes, Carrefour Market manager Nicolas Le Crom told regional television channel France 3 Bretagne, as reported by news site franceinfo, that he received several alerts during the night and that "Mes congélateurs étaient programmés à 95°C sur mon application" (in English: My freezers were set to 95°C on my app) on his phone.[4]

The E.Leclerc in Lescure-d'Albigeois (Tarn) was hit the following night, October 12 to 13, 2026, regional daily newspaper La Dépêche du Midi reported.[15] Store director Yoan Rivera had hoped the store would be spared because of the system it uses: the chains first targeted run Danfoss software, while the Tarn store is equipped with Dixell, the paper reported.[15] Rivera said: "Mais finalement, ils se sont aussi introduits dans ce système" (in English: But in the end, they got into that system too).[15]

Discarded food and store losses

[edit | edit source]

Intermarché told AFP on October 12 that stores would be forced to "jeter l'ensemble des produits" (in English: throw out all the products) that were affected, fresh and frozen.[5] A Mousquetaires spokesperson, quoted by CNBC on October 13, said Intermarché and Netto had taken all necessary precautions to "remove and dispose of any affected products as quickly as possible, to ensure consumer safety".[16]

Schelcher said losses can reach "quelques dizaines de milliers d'euros" (in English: a few tens of thousands of euros) in a small store and can go up to 180,000 or 200,000 euros in a hypermarket, adding that he did not have the total figure for the damage.[1] Marie, who manages a store in Etréchy (Essonne), told franceinfo in a report published on October 13 that full cartons of baguettes and pastries had ended up in the dumpster outside: "Il y en a pour environ 60 000 euros" (in English: there is about 60,000 euros' worth).[4] Two Intermarché supermarkets in Haguenau (Bas-Rhin) cited 270,000 euros in lost goods to radio station France Inter, franceinfo reported.[4]

Cotillard estimated that the cost would be "des dizaines de millions d'euros au niveau national" (in English: tens of millions of euros at the national level) in "une seule matinée de gestion de crise" (in English: a single morning of crisis management), AFP reported on October 12.[3]

Insurance cover and responsibility for losses

[edit | edit source]

According to Intermarché, quoted by AFP on October 12, 2026, "l'un des points durs" (in English: one of the sticking points) would concern insurance policies that do not cover this type of incident.[3] In the version of its alert dated October 13, 2026, CERT-FR listed the step "Vérifier les conditions contractuelles d’assurance" (in English: check the contractual insurance conditions) before cutting the internet data feed to the refrigeration contractor, under its instructions for both compromised and uncompromised equipment.[9]

Four insurance brokers told Reuters, in a report financial news site Zonebourse published in French on October 15, 2026, that cyber insurance policies generally do not cover material losses resulting from attacks, and that the supermarkets' claims could be affected if they did not have the latest software updates.[17] In the same report, Paul Gooch, a deputy head of department at insurer Tokio Marine Kiln, said that outdated software was generally not, on its own, grounds for rejecting a claim.[17]

Cotillard predicted "une guerre juridique" (in English: a legal war) between the large French retailers and Danfoss.[18] He also said "On va se renvoyer la balle sur la responsabilité" (in English: we are going to pass the buck back and forth over responsibility), adding that he believed Danfoss had explained the problem was not on its side, so there would be an inquiry.[19]

Refrigeration system managers

[edit | edit source]

Danfoss describes the System Manager in its refrigeration systems for food retail as "the brain of the system", coordinating data to and from the individual refrigeration controllers, including temperature data for logging and alarms.[20] One such model is the Danfoss AK-SM 800A, which industrial cybersecurity news site Industrial Cyber described as "a centralized system manager" that coordinates refrigeration controllers in supermarkets and also in cold stores, warehouses and other commercial sites.[21] Danfoss says the System Manager "can be set up to optimize different functions such as suction pressure and coordinated defrosting".[20]

Supermarkets typically use central control panels to manage multiple refrigeration units.[6] According to security publication CSO Online, the controllers' internet interfaces are online because supermarkets often buy "refrigeration as a service":

with providers guaranteeing performance as long as they have access to a constant stream of data from the refrigerators they maintain

[8]

Schelcher said U stores were "pas clients directs de Danfoss" (in English: not direct customers of Danfoss) and that "nous sommes clients d'acteurs frigoristes qui nous mettent à disposition cette solution" (in English: we are customers of refrigeration contractors who make this solution available to us).[1]

Remote access to store refrigeration controllers

[edit | edit source]

Industrial equipment such as refrigeration units, long isolated from the internet, is now connected via sensors or remote monitoring systems, Antoine Hautin of cybersecurity consultancy Almond told AFP.[2] English-language news site The Local France reported that a supermarket's refrigeration equipment is not necessarily linked to the store's own computer network, but that some units have 3G mobile cards through which technicians can check temperatures and change settings from a distance.[22] Kevin Tellier, a cybersecurity expert at security company Synacktiv, said, as quoted by French parliamentary channel Public Sénat, that such refrigeration systems are found exposed on the internet "en raison d'une mauvaise configuration opérée par l'enseigne pour des raisons de praticité" (in English: because of a bad configuration made by the retail chain for practical reasons).[23] Tellier also said:

Le réfrigérateur est facilement accessible sur Internet sous la forme d'une interface de connexion avec un nom d'utilisateur et un mot de passe

[23]

In English: the refrigerator is easily reachable on the internet as a login page with a user name and a password.[23]

Cybersecurity firm Claroty wrote that the AK-SM 800A gives operators "a web-based management interface", a control page opened in a web browser, from which administrators can "Monitor refrigeration circuits", "Configure temperature thresholds", "Review historical alarms", "Adjust operating schedules" and "Manage users and permissions".[24] CERT-FR told operators whose equipment had not been compromised to check the whole configuration, "notamment les plages de dégivrage" (in English: in particular the defrost time ranges), in a version of its alert dated October 13, 2026.[9]

Danfoss's French-language security guidance says "Modifiez les mots de passe par défaut lors de la mise en service" (in English: change the passwords the system comes with when it is first put into service).[25] A 2025 advisory from the US Cybersecurity and Infrastructure Security Agency described a flaw in Danfoss's AK-SM 8xxA series before version R4.2, reported by Claroty's Team82, caused by "datetime-based password generation" (a password worked out from the date and time), that "could potentially result in an authentication bypass", meaning a way past the login without the real password.[26] Claroty found that a routine in the AK-SM 800A "generates a daily authentication password based solely on the device's current date".[24] By reproducing the same algorithm, Claroty wrote, an attacker can generate a valid authentication code for any given day, bypass the standard login process and get into the web page used to run the device with an administrator's access ("administrative access to the device's web management interface").[24] SOCRadar, a threat-intelligence company, wrote on October 13, 2026 that Claroty's testing "covered only the AK-SM 800A, not the two end-of-life models Danfoss named".[27] SOCRadar also wrote that "Danfoss named two affected models: the AK-SM 800, ... and the AK-SC 355".[27]

Security news site SecurityWeek reported on October 15, 2026 that the CERT-FR alert did not tie the compromises to any specific vulnerability and that "neither Danfoss nor French authorities have tied the attack to the flaws Claroty disclosed".[7] On RMC radio on the morning of Tuesday, October 13, ethical hacker Clément "SaxX" Domingo gave his own view, as quoted by franceinfo:

C'est simplement une mise à jour qui n'a pas été faite, d'où l'intérêt de faire ces mises à jour. Et donc des cybercriminels ont pris la main sur ces équipements avec un mot de passe hyper simple, puisque c'était à chaque fois la date du jour qui permettait de se connecter à tous ces équipements

[4]

In English: it is just an update that was not done, hence the importance of doing these updates; and so cybercriminals took control of this equipment with a super-simple password, since each time it was the date of the day that allowed logging in to all of this equipment.[4]

CERT-FR alert

[edit | edit source]

CERT-FR published alert CERTFR-2026-ALE-012 on October 12, 2026.[28] CERT-FR's website is published by the Agence nationale de la sécurité des systèmes d'information (ANSSI),[9] France's National Cybersecurity Agency.[6]

The first version, dated October 12, was titled "Incident de sécurité ciblant les Danfoss série AK-SM et AK-SC" (in English: Security incident targeting the Danfoss AK-SM and AK-SC series).[29] CERT-FR wrote that it was aware of "nombreuses compromissions" (in English: numerous compromises) of them and gave the instruction "Déconnecter ou filtrer les accès aux instances AK-SM et AK-SC" (in English: Disconnect or filter access to the AK-SM and AK-SC instances).[29]

A second version, dated October 13 and logged as adding other targeted equipment, named US-based Copeland's xweb and Dixell xweb alongside the Danfoss AK-SM and AK-SC series in its summary.[9][30]

Version 2 sorts its instructions by whether the equipment has been compromised;[9] in both cases it says to remove the "exposition Internet" (in English: internet exposure), meaning reachability from the internet, of the units concerned and of every unit reachable at a public internet address.[9] It says "Rétablir l’accès uniquement via un VPN sécurisé ou un réseau protégé" (in English: restore access only via a secure virtual private network or a protected network), and adds:

Dans l'urgence, un simple filtrage des IP sources des prestataires frigoristes sur un pare-feu est possible, mais cette solution ne doit pas être considérée comme pérenne

[9]

In English: in an emergency, a simple filter on the refrigeration contractors' source internet addresses at a firewall is possible, but this solution should not be considered lasting.[9] For compromised equipment, it says to carry out a factory reset, restoring the device to its factory defaults: "Restaurer l'équipement (Reset Factory)" (in English: Restore the equipment).[9][8]

Paris prosecutor's inquiry and government statements

[edit | edit source]

Asked by AFP, the Paris prosecutor's office announced that it had opened an inquiry on its own initiative into "la cyberattaque d'ampleur touchant les réfrigérateurs connectés de plusieurs grands magasins" (in English: the large-scale cyberattack affecting the connected refrigerators of several large stores), AFP reported on October 12, 2026.[3] In AFP's English report, the prosecutor's office said the probe will help:

identify the victims and establish the link with the damage they reported in terms of foodstuff losses and the outbreak of fires

[2]

CNBC quoted a Mousquetaires spokesperson on October 13, 2026 as saying that in some stores "the overheating of equipment resulted in smoke, but no fires have been reported".[16]

According to the Prime Minister's entourage, Sébastien Lecornu immediately asked ANSSI to "se saisir du sujet" (in English: to take up the matter) and "suit le dossier personnellement" (in English: is following the case personally).[3] AFP reported in English that a person close to Lecornu said France's cybersecurity agency had already identified "a vulnerability in software supplied by a Danish company and has contacted the vendor".[2]

According to the Associated Press, Lescure told Parliament on October 13, 2026 that there was no risk to France's food supplies, but acknowledged that the attack "touches the heart of our food security".[12]

SecurityWeek reported that, according to Reuters, which cited a source familiar with the probe, investigators were puzzled by the lack of either a claim of responsibility or a ransom demand.[7]

Chains and store counts

[edit | edit source]
Store counts given by each chain or its owner, October 12 and 13, 2026
Date Outlet Speaker Chain or brand Figure as printed
October 12, 2026, 13:50 AFP, in Sud Radio Intermarché Intermarché "150 à 200 magasins" (in English: 150 to 200 stores)[31]
October 12, 2026, 13:50 AFP, in Sud Radio Coopérative U Coopérative U "moins d'une centaine de points de vente" (in English: fewer than a hundred outlets)[31]
October 12, 2026, 17:52 Reuters, in Boursorama Groupement Mousquetaires, owner of Intermarché Intermarché "environ 150" (in English: about 150) of its stores[13]
October 12, 2026, 23:37 AFP, in La Libre Belgique the retailers Intermarché and Netto "Au moins 300 points de vente" (in English: at least 300 outlets)[3]
October 12, 2026, 23:37 AFP, in La Libre Belgique the retailers E.Leclerc "plusieurs magasins" (in English: several stores)[3]
October 12, 2026, 23:37 AFP, in La Libre Belgique the retailers Carrefour "80 supermarchés" (in English: 80 supermarkets)[3]
October 12, 2026, 23:37 AFP, in La Libre Belgique the retailers Monoprix "une trentaine" (in English: about 30)[3]
October 12, 2026 Reuters, in Euronext Monoprix Monoprix "5% of its stores" (Reuters describes Monoprix as operating "about 490 stores in France")[32]
October 13, 2026 TIME Les Mousquetaires Intermarché or Netto "Around 180"[6]
October 13, 2026 AP, in PBS NewsHour Groupement Mousquetaires Intermarché and Netto "300 of its Intermarché and Netto stores"[12]
October 13, 2026 AFP, in Stratégies Dominique Schelcher, chief executive of Coopérative U Coopérative U "80 magasins seulement sur 2 000" (in English: only 80 stores out of 2,000)[1]

Danfoss and Copeland statements

[edit | edit source]

Trade publication Cooling Post reported on October 12:

In a statement to the Cooling Post, Danfoss revealed that the majority of units affected were legacy products or current products running outdated firmware. Specifically, those affected were its AK-SM800, which was officially declared end-of-life in 2021 and the AK-SC355 systems, which were phased out in 2016. These no longer receive software or security updates.

[33]

AP quoted the company as saying it had long advised customers to keep supported systems updated with the latest firmware (the software built into the equipment) and to operate behind a firewall.[12]

A spokesperson for Copeland, which owns Dixell, declined to confirm the information from France's cybersecurity agency that Copeland and Dixell refrigeration systems had also been hacked, and said the company's top priority is to protect customers' operations, Reuters reported on October 13.[34] AP reported on October 13 that Copeland said a vulnerability had been identified in "a discontinued, end-of-life generation of controllers" and that it was working with impacted customers.[35]

Earlier attacks on refrigeration controllers

[edit | edit source]

Danfoss's Tech Insider newsletter of October 31, 2025 described two 2022 attacks on stores using its AK SM 800 among its "Real world examples".[36] Of Russia in 2022, Danfoss wrote:

Sixteen supermarkets using AK SM 800 were targeted by cyberattacks at the start of the war.

[36]

Of Israel in 2022, it wrote:

Forty stores were hacked. All affected stores lacked proper firewall or VPN protection, and all used AK SM 800. Only the SM800 was affected; however, our sales team reported that a mix of SM800 and SM800A units was installed.

[36]

Security news site BankInfoSecurity reported on October 13, 2026 that another attack targeting refrigeration controllers happened in May at a food-production plant in an unnamed country, "possibly Israel", investigated by Profero, an incident response firm based in Tel Aviv.[37]

Internet-exposed controllers counted by scanners

[edit | edit source]

In research published on August 9, 2026, Team82, the research group of Claroty, reported multiple vulnerabilities in the web management interface built into the Danfoss AK-SM 800A.[24] The researchers searched Shodan and Censys, publicly available platforms that scan the whole internet, for telltale signs of that interface.[24] A figure caption in the post counted "2765 exposed devices according to Censys" for the AK-SM 800A.[24]

On October 13, 2026, SOCRadar searched Shodan for the title that the Danfoss StoreView control page displays, which Claroty had highlighted in August, and found 2,898 results in France, about 65% of the 4,481 worldwide.[27] Censys returned 881 "unique hosts", meaning separate devices, in France for the same page title.[27] SOCRadar wrote that the two figures "measure different things", because Shodan can count one device several times, and put the range at "roughly 900 exposed devices and 2,900 exposed services".[27]

End-of-life controllers

[edit | edit source]

In a February 2026 Binding Operational Directive to US federal agencies, the Cybersecurity and Infrastructure Security Agency defined end-of-support devices as hardware, firmware and software versions that "no longer receive timely, supported updates from the original equipment manufacturer", including security updates.[38]

The same Danfoss Tech Insider newsletter says the AK SM 800 "was officially declared End of Life in May 2021" and that, according to a Danfoss product note it cites, "End of Life status leads to End of Service".[36]

As of October 13, 2026, Danfoss's security advisories page listed no advisory about the attack or about the AK-SM 800 or the AK-SC 355, according to cybersecurity news site The Hacker News.[39]

The version of CERT-FR's alert dated October 13, 2026 carries this warning:

ATTENTION : Des campagnes d'attaques sont probablement toujours en cours visant ces équipements. Maintenir une exposition Internet à un équipement sans correctif de sécurité (End of Life - EOL) est l'exposer à une très forte probabilité de compromission. N'effectuer qu'un Reset Factory est dans ce cas insuffisant, les persistances d'une instance compromise seront supprimées mais l'équipement restera vulnérable et sera certainement de nouveau compromis.

[9]

In English, the warning says that attack campaigns targeting this equipment are probably still under way, that keeping equipment with no security fix (End of Life, EOL) reachable from the internet makes it highly likely to be hacked, and that in this case a factory reset alone is not enough: it removes whatever the attackers left behind on a hacked unit, but the equipment will remain vulnerable and is sure to be hacked again.[9]

In a video uploaded on September 28, 2026 about a Samsung refrigerator failure after a software update, consumer advocate Louis Rossmann argued that consumers are better off with a refrigerator that does not connect to the internet.[40] He said the benefit of a fridge connected to somebody else's computer is minimal, while the downside is that the other party can remotely disable it if somebody makes a mistake.[40]

See also

[edit | edit source]

References

[edit | edit source]
  1. ↑ 1.0 1.1 1.2 1.3 1.4 AFP avec ES (2026-10-13). "Cyberattaque dans les supermarchés : le PDG de Coopérative U Dominique Schelcher tempère l'ampleur des dégâts" (in français). Stratégies. Archived from the original on 2026-10-17. Retrieved 2026-10-15.
  2. ↑ 2.0 2.1 2.2 2.3 2.4 AFP (2026-10-12). "French supermarkets suffer refrigerator shutdown after 'unprecedented' cyberattack". Agence France-Presse. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  3. ↑ 3.00 3.01 3.02 3.03 3.04 3.05 3.06 3.07 3.08 3.09 3.10 AFP (2026-10-12). "Des supermarchés français touchés par une cyberattaque inédite de leurs installations frigorifiques" (in français). La Libre Belgique. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  4. ↑ 4.0 4.1 4.2 4.3 4.4 4.5 franceinfo avec AFP (2026-10-13). "Un piratage "pas si sophistiqué que ça" : ce que l'on sait de la cyberattaque qui a fait monter en température les frigos de supermarchés" (in français). franceinfo. Archived from the original on 2026-10-13. Retrieved 2026-10-15.
  5. ↑ 5.0 5.1 AFP (2026-10-12). ""Inédit et d'une extrême gravité": de nombreux supermarchés contraints de jeter une grande quantité de produits frais et surgelés en France" (in français). Paris Match Belgique. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  6. ↑ 6.0 6.1 6.2 6.3 Miranda Jeyaretnam (2026-10-13). "Cyberattack on Supermarket Fridges in France Highlights Food Systems' Vulnerability". TIME. Archived from the original on 2026-10-14. Retrieved 2026-10-15.
  7. ↑ 7.0 7.1 7.2 Eduard Kovacs (2026-10-15). "Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers". SecurityWeek. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  8. ↑ 8.0 8.1 8.2 Peter Sayer (2026-10-14). "Unplug your smart fridges, French supermarkets warned after cyberattack". CSO Online. Archived from the original on 2026-10-14. Retrieved 2026-10-15.
  9. ↑ 9.00 9.01 9.02 9.03 9.04 9.05 9.06 9.07 9.08 9.09 9.10 9.11 "Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération" (in français). CERT-FR. 2026-10-12. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  10. ↑ 10.0 10.1 "The secret behind Danfoss adaptive defrost". Danfoss. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  11. ↑ Aymeric Geoffre-Rouland (2026-10-12). ""Inédit et d'une extrême gravité" : des pirates ont programmé les frigos de supermarchés français à 50°C" (in français). Les Numériques. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  12. ↑ 12.0 12.1 12.2 12.3 Angela Charlton; Dee-Ann Durbin (2026-10-13). "Cyberattacks disrupt refrigeration systems at European supermarkets". PBS NewsHour (Associated Press). Archived from the original on 2026-10-15. Retrieved 2026-10-15.{{cite web}}: CS1 maint: multiple names: authors list (link)
  13. ↑ 13.0 13.1 Léo Marchandon (2026-10-12). "France-Des réfrigérateurs de centaines de supermarchés déréglés par une cyberattaque" (in français). Reuters (via Boursorama). Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  14. ↑ Isabelle Chaperon; Damien Leloup; Olivier Pinaud; Manon Rescan; Florian Reynaud (2026-10-12). "Dans les supermarchés français, une journée noire après une cyberattaque massive visant des systèmes frigorifiques" (in français). Le Monde. Archived from the original on 2026-10-15. Retrieved 2026-10-15.{{cite web}}: CS1 maint: multiple names: authors list (link)
  15. ↑ 15.0 15.1 15.2 Nawel Omara (2026-10-13). "REPORTAGE. Cyberattaque dans les supermarchés : "Nous avons dû tout jeter…" Un piratage provoque des pertes massives dans un E.Leclerc proche d'Albi" (in français). La Dépêche du Midi. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  16. ↑ 16.0 16.1 Sawdah Bhaimiya (2026-10-13). "French supermarket fridges get hacked, heating to 122°F and sparking fires". CNBC. Archived from the original on 2026-10-14. Retrieved 2026-10-15.
  17. ↑ 17.0 17.1 "Les assurances cyber des supermarchés français ne devraient pas couvrir les pertes de denrées, selon les assureurs" (in français). Zonebourse. Reuters. 2026-10-15. Archived from the original on 2026-10-17. Retrieved 2026-10-15.
  18. ↑ Sudouest.fr avec AFP (2026-10-13). "Cyberattaque contre les supermarchés : le patron des Mousquetaires/Intermarché prédit « une guerre juridique » entre les grands distributeurs et Danfoss, le fabricant danois des frigos visés" (in français). Sud Ouest. Archived from the original on 2026-10-17. Retrieved 2026-10-15.
  19. ↑ Sébastien Salpietro (2026-10-13). "Frigos piratés : 300 magasins Intermarché et Netto touchés, le patron des Mousquetaires raconte «l'enfer»" (in français). Capital. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  20. ↑ 20.0 20.1 "ADAP-KOOL® software for supermarkets". Danfoss. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  21. ↑ Anna Ribeiro (2026-10-13). "Intermarché cyberattack exposes refrigeration security risks as French supermarkets face operational disruption". Industrial Cyber. Archived from the original on 2026-10-17. Retrieved 2026-10-15.
  22. ↑ Emma Albright (2026-10-13). "What we know so far about the cyberattack that targeted French supermarkets". The Local France. Archived from the original on 2026-10-17. Retrieved 2026-10-15.
  23. ↑ 23.0 23.1 23.2 Simon Barbarit (2026-10-13). "Cyberattaque contre des frigos connectés de supermarchés : « Des systèmes de réfrigération exposés sur Internet », alertent des experts en cybersécurité" (in français). Public Sénat. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  24. ↑ 24.0 24.1 24.2 24.3 24.4 24.5 Amir Zaltzman (2026-08-09). "Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers". Claroty. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  25. ↑ "Danfoss reste concentré sur la sécurité informatique" (in français). Danfoss. Archived from the original on 2026-10-13. Retrieved 2026-10-15.
  26. ↑ "Danfoss AK-SM 8xxA Series (Update A)". Cybersecurity and Infrastructure Security Agency. 2025-05-20. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  27. ↑ 27.0 27.1 27.2 27.3 27.4 Omer Faruk Diken (2026-10-13). "French Supermarket Cyberattack: Exposed OT Behind France's Food Supply". SOCRadar. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  28. ↑ "Alertes de sécurité" (in français). CERT-FR. Retrieved 2026-10-15.
  29. ↑ 29.0 29.1 "Incident de sécurité ciblant les Danfoss série AK-SM et AK-SC" (in français). CERT-FR. 2026-10-12. Archived from the original on 2026-10-13. Retrieved 2026-10-15.
  30. ↑ "Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération" (in français). CERT-FR. 2026-10-12. Archived from the original (JSON) on 2026-10-15. Retrieved 2026-10-15.
  31. ↑ 31.0 31.1 AFP (2026-10-12). "Cyberattaque : Intermarché et Coopérative U touchés dans la nuit" (in français). Sud Radio. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  32. ↑ Leo Marchandon; Gabriel Stargardter (2026-10-13). "Hackers heat French supermarket fridges, sparking fires and spoiling food". Reuters (via Euronext). Archived from the original on 2026-10-17. Retrieved 2026-10-15.{{cite web}}: CS1 maint: multiple names: authors list (link)
  33. ↑ "Danfoss moves to mitigate cyberattack". Cooling Post. 2026-10-12. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  34. ↑ John Irish (2026-10-14). "Copeland, Dixell refrigeration systems also hacked, French cybersecurity agency says". The Star (Reuters). Archived from the original on 2026-10-17. Retrieved 2026-10-15.
  35. ↑ Associated Press (2026-10-13). "Cyberattacks hit European supermarket chains and disrupt refrigeration systems". KPRC Click2Houston. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  36. ↑ 36.0 36.1 36.2 36.3 "Tech Insider October 2025". Danfoss. 2025-10-31. Archived from the original on 2026-10-13. Retrieved 2026-10-15.
  37. ↑ David Meyer; Mathew J. Schwartz (2026-10-13). "Hackers Attack French Supermarket Freezers Causing Food Loss". BankInfoSecurity. Archived from the original on 2026-10-17. Retrieved 2026-10-15.{{cite web}}: CS1 maint: multiple names: authors list (link)
  38. ↑ "BOD 26-02: Mitigating Risk From End-of-Support Edge Devices". Cybersecurity and Infrastructure Security Agency. 2026-02-05. Archived from the original on 2026-10-15. Retrieved 2026-10-15.
  39. ↑ Swati Khandelwal (2026-10-13). "Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers". The Hacker News. Archived from the original on 2026-10-17. Retrieved 2026-10-15.
  40. ↑ 40.0 40.1 Louis Rossmann (2026-09-28). "NEVER connect your food supply to the web: Samsung fridge fail after bad holiday software update". YouTube. Archived from the original on 2026-10-17. Retrieved 2026-10-15.
Retrieved from "https://consumerrights.wiki/index.php?title=User:Louis/French_supermarket_refrigeration_controller_cyberattack_(2026)&oldid=70284"