Cyberattack Hijacks Refrigeration Systems at Hundreds of French Supermarkets

A cyberattack between October 11 and 12, 2026, hijacked the refrigeration control systems of hundreds of French supermarkets, forcing defrost cycles that spoiled significant quantities of food and disrupted operations across multiple retail chains.

The attack targeted operational technology systems at stores belonging to Intermarche and E.Leclerc, two of France's largest supermarket chains. Attackers gained access to the systems that control refrigeration units and forced them into defrost mode, raising temperatures in refrigerated and frozen food sections above safe levels.

The incident caused widespread food spoilage and forced stores to discard large amounts of perishable goods. Some locations temporarily closed to allow for cleanup and system restoration. The financial impact was not immediately disclosed.

French cybersecurity authorities said the attack exploited vulnerabilities in legacy industrial control systems that many retailers have not updated or isolated from internet-connected networks. Operational technology, which controls physical equipment like refrigeration, heating, and lighting, is increasingly targeted by attackers because it is often older and less protected than standard IT systems.

No group has claimed responsibility for the attack. Investigators are examining whether it was financially motivated, possibly as a precursor to a ransom demand, or whether it was intended to cause disruption for other reasons.

The incident has renewed calls from European cybersecurity regulators for retailers and other operators of critical infrastructure to audit and secure their operational technology systems. France's national cybersecurity agency, ANSSI, said it is assisting affected companies with the investigation and recovery.