Skip to content
World edition
Analyst Newspaper
Technology · Multi-perspective analysis

Cyberattack defrosts refrigerators at hundreds of French supermarkets

Intermarché and Coopérative U confirmed an overnight attack on refrigeration systems; reports differ on the scale, cause and broader implications.

Analysis deskEditor Andersson Iyke
15 outlets, 7 regions

What happened

Hackers raised temperatures in refrigerators and freezers at French supermarkets overnight, spoiling fresh and frozen food.18913

Intermarché and Coopérative U confirmed the attack, saying some 150-200 Intermarché stores and almost 100 Coopérative U outlets were targeted.2121510

Paris prosecutors confirmed the attack, which reportedly also hit other major chains including E. Leclerc.211

The attack caused fires at some affected locations, and food losses have been estimated in the millions of euros.19134

What's agreed

Reported consistently by outlets in more than one region.

  • Hundreds of French supermarket stores were affected by a cyberattack that caused refrigeration systems to defrost overnight.1239121315
  • Intermarché had some 150-200 stores affected and Coopérative U had almost 100 outlets affected, according to the two retailers.2101215
  • Paris prosecutors confirmed the attack had occurred.211
  • The spoiled food losses have been estimated at millions of euros.813
  • The attack also caused fires at some locations.194

Where accounts differ

Each account is attributed to who makes it. We do not judge between them.

Total number of stores affected

Intermarché and Coopérative U, as reported by AFP via SCMP and France 24

Around 150-200 Intermarché shops and almost 100 Coopérative U outlets were targeted, totaling roughly 250-300 stores.21512

CNA

The attack affected more than 400 supermarket outlets across France.7

BFM TV, as cited by SCMP

France's largest chain, E. Leclerc, was also affected, suggesting a broader scope beyond the two confirmed chains.2

Cause or method of the attack

Clarín

Attackers remotely took control of Danish-made refrigeration software to raise temperatures in display cases.4

CNA

The attack exploited outdated refrigeration control systems.7

Anadolu Agency

Attackers targeted refrigeration control systems directly, without specifying the software origin or vulnerability.5

Whether fires resulted from the attack

Reuters, via Daily Maverick and Express Tribune

The attack caused fires at affected stores.16

Clarín, citing the Paris Prosecutor's Office

The investigation covers attempted arson detected at affected locations, a more specific characterization than confirmed fires.4

Sky News

The attack sparked fires as part of a described large-scale cyber attack.9

How it's framed

What each perspective puts first, based on headlines and summaries.

PerspectiveHow it readsWhat it puts first
European outlets, including public broadcastersEuropeEuropean coverage emphasizes the scale of the attack, its description as unprecedented, and institutional responses such as cybersecurity probes and EU coordination.3912131415unprecedented attack, food security concerns, cybersecurity probe, EU coordination
Latin American pressLatin AmericaClarín frames the incident within a geopolitical lens, describing it as hybrid warfare and highlighting the specific software exploited and financial losses alongside a criminal investigation into attempted arson.4hybrid warfare, million-dollar losses, Danish software, investigation into arson
Wire-syndicated coverage across Africa, South Asia and Middle EastAfricaOutlets running Reuters or similar syndicated copy focus on the immediate physical effects, fires and spoiled food, and government response, with less emphasis on attribution or broader implications.16810fires, spoiled food, cybersecurity probe
Southeast Asian state and private outletsSoutheast AsiaCoverage from CNA and The Straits Times emphasizes confirmation by official sources and the technical vulnerability exploited, with CNA citing a notably higher store count than other outlets.711confirmed by prosecutors, outdated systems, scale of outlets affected
East Asian coverageEast AsiaSouth China Morning Post provides detailed attribution to AFP reporting, naming specific chains including Intermarché, Coopérative U, and E. Leclerc, with precise store figures from the retailers themselves.2named retailers, confirmed figures, prosecutor confirmation

What the coverage leaves out

  • None of the outlets reviewed identified who carried out the attack or their motive.
  • None of the outlets reviewed reported whether any arrests have been made or suspects identified.
  • None of the outlets reviewed detailed the specific vulnerability or software exploited beyond Clarín's reference to Danish software and CNA's reference to outdated systems.
  • None of the outlets reviewed reported a final, confirmed total number of stores or chains affected.
  • None of the outlets reviewed reported comment from E. Leclerc itself confirming its involvement, this was only cited via BFM TV through SCMP.

Why it matters

The attack has raised questions about food security and the vulnerability of industrial control systems in critical retail infrastructure across Europe.3

France's cyber agency is coordinating with European counterparts in response, suggesting concern about risks to other companies beyond the supermarket sector.614

What to watch

  • Results of the Paris prosecutors' investigation into the cyberattack and reported arson.
  • Findings from France's cybersecurity probe and EU coordination on risks to other companies.
  • Whether additional supermarket chains confirm being affected beyond Intermarché, Coopérative U and the reportedly affected E. Leclerc.

Sources (15)

Every outlet we drew on, grouped by where it is based. Read the originals for the full reporting.

Latin America

Middle East & Turkey

Get every side of the day's news.

Join the list for our daily briefing, launching soon.