Cyberattack forces European supermarket fridges into 50C defrost cycles

Hackers forced supermarket refrigeration systems across France into continuous 50C defrost cycles, spoiling fresh food and hitting deliveries, while Dutch giant Albert Heijn halted online grocery orders after its own cybersecurity incident.

Why it matters: Refrigeration is the physical core of the food supply chain, and forcing a routine maintenance function to cook fresh inventory shows how a software exploit on industrial controls can become a supply disruption with no data theft involved.

Data as of Monday, October 12, 2026. The French refrigeration attack is BFMTV's reporting as carried by Infosecurity Magazine; the €270,000 loss figure and affected-chain list are the broadcaster's, not independently verified by us. Albert Heijn confirmed an incident and halted online orders via Dutch press statements; the company has not disclosed the cause. The two incidents are being reported in parallel, not as one campaign; attack method and attribution are not publicly established. Still developing.

French broadcaster BFMTV reports attackers targeted outdated versions of Danish manufacturer Danfoss’s refrigeration control software at numerous supermarkets, remotely forcing defrost cycles with temperatures programmed to reach as high as 50C. Around 150 Intermarche stores were affected along with Leclerc, Carrefour and Monoprix outlets, per retail trade coverage; two stores in Haguenau alone lost about €270,000 in merchandise. Cooperative U president Dominique Schelcher called the attack unprecedented and of the utmost gravity, given refrigeration’s role in preserving fresh food.

Separately, Dutch market leader Albert Heijn halted online grocery deliveries and took its website, app and customer service offline after a cybersecurity incident, telling customers it cannot say when services will return. In stores, electronic shelf labels are showing last week’s promotions while checkout charges current prices, and customers have been asked to keep receipts for compensation. The company has not disclosed the cause or whether data was compromised.

Cyberattack forces European supermarket fridges into 50C defrost cycles

Sources