JupiteX Get the app
Defence & Security13 Oct 2026 · about 6 min

In French supermarkets, a dark day after a massive cyberattack targeting refrigeration systems

The brief

The incident was not limited to one shop or one supermarket brand. The source names Coopérative U, Intermarché, E.Leclerc and Carrefour, and reports that refrigeration infrastructure in hundreds of supermarkets was affected. That scale made the event a national retail disruption rather than an isolated technical failure. The common target was the systems controlling stores’ refrigeration equipment. Reports describe products being thrown away and remote defrosting, while one shop manager said, “On a tout jeté.” These details show that the disruption affected physical store operations, not only computers or payment systems. The source does not provide an exact number of stores, the attack’s duration, or a complete list of affected chains. It does establish that the impact crossed several large networks. The broad reach also explains why the event was described as an unprecedented attack on supermarket refrigerators and why food losses became the immediate concern.

01

Which supermarket chains were affected, and how widespread was the attack?

The incident was not limited to one shop or one supermarket brand. The source names Coopérative U, Intermarché, E.Leclerc and Carrefour, and reports that refrigeration infrastructure in hundreds of supermarkets was affected. That scale made the event a national retail disruption rather than an isolated technical failure.

The common target was the systems controlling stores’ refrigeration equipment. Reports describe products being thrown away and remote defrosting, while one shop manager said, “On a tout jeté.” These details show that the disruption affected physical store operations, not only computers or payment systems.

The source does not provide an exact number of stores, the attack’s duration, or a complete list of affected chains. It does establish that the impact crossed several large networks. The broad reach also explains why the event was described as an unprecedented attack on supermarket refrigerators and why food losses became the immediate concern.

02

What exactly happened to the supermarkets’ refrigeration systems during the cyberattack?

Supermarket refrigeration is often managed by digital controllers that regulate temperature and coordinate equipment. During this incident, those systems were disrupted. The source specifically mentions remote defrosting and says products had to be thrown away. It does not give a detailed technical description of every command or device affected.

A defrost cycle temporarily warms or stops cooling equipment so ice can be removed from evaporators. If such a process is triggered remotely, or if normal cooling controls stop working, chilled and frozen areas can rise above their required temperatures. That can endanger food, even when packaging still looks normal. A shop manager’s account, “On a tout jeté,” illustrates the practical effect.

The available text does not identify the attackers, the software used, or the precise sequence of events. It does show that the attack crossed from digital systems into physical refrigeration operations. That connection made the disruption visible in stores and created immediate stock and food-safety problems.

03

What is a cyberattack, and how can one interfere with physical equipment such as refrigerators?

A cyberattack is an intentional action against computers, software, networks or connected devices. Its goal may be to interrupt operations, alter data, steal information or gain control. The source describes an attack on supermarket refrigeration infrastructure, but it does not explain the exact technique used or identify the attackers.

Connected refrigerators normally follow digital instructions about temperature, timing, alarms and defrosting. If an attacker reaches the relevant control network, they may be able to change settings or interrupt communications. The equipment then responds to those commands or loses the instructions needed for normal operation. This is why a digital intrusion can create a physical result, such as warming food or starting a defrost cycle.

In this case, reports mention remote defrosting and discarded products across hundreds of supermarkets. Those facts show the connection between network security and food storage. They do not prove which specific command caused each loss. Future protection therefore depends on securing control systems as carefully as ordinary business computers.

04

Why did the attack force stores to throw away food and carry out remote defrosting?

Cold storage slows the growth of harmful microorganisms and helps preserve food quality. When refrigeration is disrupted, products may spend too long at unsafe temperatures. The source reports that stores threw products away and carried out remote defrosting, but it does not provide temperature readings, durations or product-by-product decisions.

Defrosting normally removes ice from cooling equipment, but it involves a temporary change in the cooling process. If it happens remotely during an attack, refrigerators or freezers may warm unexpectedly. Staff then need to check affected stock. A manager quoted in the source described the outcome simply: “On a tout jeté.” That response avoids selling food whose safety history is uncertain.

The exact reason for each discarded item is not stated. Some products may have remained safe, while others could not be cleared quickly enough. The incident shows why stores need alarms, manual checks, records and backup procedures. Those safeguards can limit waste when networked cooling systems fail.

05

How do supermarkets normally keep refrigerated and frozen food safe from the moment it arrives until it is sold?

Supermarkets normally protect chilled and frozen food through a cold chain. Products arrive in temperature-controlled vehicles, and staff check deliveries before moving them into cold rooms, freezers or chilled cabinets. Storage areas then maintain suitable temperatures until stock reaches the sales floor. The source does not describe these routine procedures; this is established food-safety practice.

Digital controllers can continuously regulate cooling and trigger alarms when temperatures change. Staff also rotate stock, keep doors closed as much as possible and inspect equipment. During a failure, they may isolate affected goods, record temperatures and assess whether products can remain for sale. These steps connect transport, storage and display into one process.

The attack mattered because it disrupted part of that chain at many stores. Reports of remote defrosting and discarded products show the consequences when cooling control becomes unreliable. Normal procedures can reduce risk, but they cannot automatically make food safe after an unknown temperature excursion. Clear records and rapid intervention remain essential.

06

Why are supermarket cooling systems connected to digital networks instead of being operated entirely by hand?

Large supermarkets operate many cold rooms, freezers and display cabinets at once. Digital networks let staff monitor temperatures, receive alerts and coordinate equipment from a central system. Automation can make routine control faster and more consistent than sending employees to inspect every unit continuously. The source does not explain why these systems were installed, so this explanation uses standard industry practice.

A networked controller can collect sensor readings and apply settings across multiple devices. It can also support remote maintenance, including defrosting or other scheduled operations. That helps stores manage complex equipment and respond quickly to faults. However, the same connection means a security problem can affect physical machinery. In this case, reports link the cyberattack with refrigeration disruption and remote defrosting.

Connectivity therefore brings both efficiency and risk. Supermarkets need separated control networks, strong access protection, alarms and manual fallback procedures. The source establishes the impact across hundreds of stores, but it does not state which safeguards were present or how they failed.

07

How do food-safety rules determine whether products are still safe to sell after their temperature has risen?

Food-safety decisions after a temperature rise depend on evidence, not appearance alone. Staff generally consider the product’s required storage temperature, how high it became, how long it stayed there and whether the package remains intact. Rules and official guidance set limits for different foods. The source does not state any specific thresholds or procedures.

Stores may use alarms, thermometers and recorded temperature histories to assess affected stock. If the history is unknown, or the product exceeded its permitted range, staff may isolate or discard it. Chilled and frozen goods can have different requirements, so one rule does not apply equally to every product. The reported disposal of products reflects this cautious approach.

The attack made assessment harder because digital refrigeration controls were disrupted and remote defrosting occurred. The source gives no details about inspections or official decisions at individual stores. In general, documented temperatures and exposure times help businesses release safe goods, while uncertainty can make disposal the safer choice.

This brief was written by AI from the original reporting and checked by other models. Names, figures and quotes come from the source; read it for full context.

Read more in the JupiteX app

Pulse is free. New stories every 4 hours, each one broken into the questions that explain it.

Or read more news on the web