The short version
- An estimated 250 to 300 stores across Intermarché and Cooperative U chains suffered remote disabling of refrigeration units.
- Paris prosecutors have opened an investigation linking the cyber intrusion to food losses and subsequent fire outbreaks.
- Retailers warn that standard insurance policies may not cover these specific types of digital-physical hybrid incidents.
A coordinated cyberattack targeting the refrigeration infrastructure of major French supermarket chains has caused widespread disruption, forcing retailers to discard large quantities of fresh and frozen goods. The incident, which began on Sunday night, represents a significant escalation in the sophistication of digital threats against physical supply chains. Two prominent retail groups, Intermarché and Cooperative U, confirmed that their cooling systems were remotely manipulated, leading to rapid defrosting in hundreds of locations across the country.
Intermarché reported that between 150 and 200 of its outlets were compromised during the operation. Similarly, nearly 100 stores under the Cooperative U banner experienced system failures. The scale of the disruption suggests a targeted effort rather than random malware activity. Executives from both organizations described the event as unprecedented in its nature, noting that the attack specifically aimed at equipment critical for preserving perishable items and maintaining food security for consumers.
Dominique Schelcher, the chief executive of Cooperative U, emphasized the severity of targeting essential preservation technology. He stated that such actions are unacceptable and pose a serious threat to the national food supply. His comments highlighted the vulnerability of modern retail infrastructure to digital interference. Teams from both companies have been mobilized to restore normal operations as quickly as possible, though the immediate impact on inventory remains substantial.
Beyond these two chains, reports indicate that other major retailers may also be affected. Media outlets cited information suggesting that E. Leclerc, France’s largest supermarket chain, experienced similar issues with hackers remotely triggering forced defrosting in numerous locations. However, E. Leclerc had not immediately confirmed these allegations at the time of reporting. The potential involvement of additional chains raises concerns about the breadth of the attack and its systemic impact on the French grocery sector.
The consequences of the intrusion extend beyond digital disruption to tangible physical damage. Paris prosecutors confirmed that an official investigation has been launched into the large-scale cyberattack. Authorities are working to identify all victims and establish a clear link between the digital breach and the reported damages, which include significant losses of foodstuffs and outbreaks of fire in affected stores. The fires appear to be secondary effects of the system failures, adding complexity to the incident.
Financial implications are also emerging as a major concern for the retailers involved. Intermarché condemned the resulting waste and economic losses but did not provide specific figures regarding the cost of discarded inventory. More critically, the company warned that existing insurance policies might not cover incidents of this nature. This gap in coverage highlights a growing challenge for businesses facing hybrid threats that blur the lines between cybercrime and physical property damage.
The incident occurs against a backdrop of heightened anxiety regarding cybersecurity in Europe. There is increasing concern about the potential for malicious actors to cause havoc across various sectors through digital means. French President Emmanuel Macron recently ordered measures to protect critical infrastructure from what he termed Russian hybrid attacks. While no attribution has been made for this specific supermarket breach, the timing and nature of the attack align with broader geopolitical tensions and warnings about state-sponsored or aligned cyber operations.
As investigations continue, the focus remains on understanding the full scope of the damage and identifying the perpetrators. The probe aims to shed light on how the attackers bypassed security protocols to manipulate industrial control systems remotely. For consumers, the immediate impact includes potential shortages of certain fresh products in affected areas. Retailers are working to replenish shelves, but the incident serves as a stark reminder of the fragility of modern supply chains in the face of evolving digital threats.
Sources behind this briefing
Go to the original reporting
- The Guardian US↗Cyber-attack defrosts refrigerators in two French supermarket chains
