France reports cyberattack affecting 700 supermarkets
The French government calls it a serious attack on the food chain; regulators warn that several systems are still under attack.
Follow-up to: Cyberattack hits cooling systems at French supermarkets Monday, 12 October 2026, 14:28
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
Around 700 French supermarkets have been affected by cyberattacks on digital refrigeration systems. France’s cyber authority warns that attacks on different types of systems may continue.
French Finance Minister Roland Lescure told parliament on Tuesday that around 700 of the approximately 10,000 supermarkets in France have been affected. He said there is no immediate food shortage, but that the attack has hit a vulnerable part of the food supply.
The attackers targeted systems used to manage refrigeration remotely. At several shops, temperature and automatic defrost settings were changed. As a result, shops had to discard products or temporarily remove them from sale. The precise total damage has not yet been established.
France’s cyber authority CERT-FR has meanwhile named several types of equipment that have been compromised. These include systems from Danfoss, Copeland and Dixell. CERT-FR advises operators not to expose systems directly to the internet and to use secure connections.
An Intermarché branch reported that the attack during the night of 11 to 12 October affected, among other things, alarm systems and cold rooms. The shop expected to resume deliveries of frozen products on 14 October. That report applies to that branch and is not a general statement that all shops have recovered.
French prosecutors are investigating the attack. The parties involved have not yet identified a perpetrator, and there is no public indication that the attack is linked to the simultaneous problems at Ahold Delhaize. The scale and use of similar refrigeration technology do make the events relevant to supermarket chains in other countries.
The case shows that digital security is not only about websites and customer data. Industrial equipment in shops can also provide an entry point to processes that directly affect food safety and business operations. The investigations ahead will have to determine which suppliers, configurations and security choices gave the attackers access.
One story, several perspectives
What is established
- Digital refrigeration systems at French supermarkets have been compromised.
- The French government estimates that approximately 700 shops have been affected.
- CERT-FR warns of further attacks and advises shielding systems from direct exposure.
Left
Arguments Refrigeration systems essential to the food supply should be treated as critical infrastructure. Suppliers and supermarket groups should bear the cost of security and share information about vulnerabilities.
Values Food security, public oversight and the protection of workers and consumers.
Consequences Stricter requirements could place a particular burden on smaller shops, but would reduce the chance that a single vulnerability has major societal consequences.
Centre
Arguments The government should establish minimum standards and reporting obligations, while companies should retain room to choose appropriate security for each installation. Independent evaluation after the incident is necessary.
Values Risk-based oversight, proportionality and continuity.
Consequences A joint approach by government, suppliers and supermarkets could improve resilience without making all systems identical.
Right
Arguments Companies and suppliers should bear primary responsibility for their digital security. Government intervention should be limited to clear safety standards and pursuing perpetrators.
Values Individual responsibility, innovation and limited regulatory burdens.
Consequences The sector would retain greater flexibility, but security levels and potential damage could vary more widely between companies.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The core figures come from AP and are consistent with the official French cyber warning. Where information comes from only one shop, it is described as a local report.
- confirmed Approximately 700 French supermarkets have been affected. — Mentioned by the French finance minister, according to AP. source
- confirmed CERT-FR reports the compromise of several types of refrigeration-system controllers. — The official warning names Danfoss, Copeland and Dixell. source
- confirmed An Intermarché branch reported problems with alarm systems and cold rooms. — This is stated in the branch’s public customer notice in Gradignan. source
- uncertain There is no public indication of a link with the Ahold Delhaize incident. — According to DutchNews, Ahold Delhaize said it had no evidence of a link; an independent investigation has not yet been completed. source
Editor's note
The figure of approximately 700 affected supermarkets and the warning from CERT-FR have been confirmed. The perpetrator, total damage and connection with the Dutch incident remain unknown.Sources
The story so far
- Monday, 12 October 2026, 14:28 Cyberattack hits cooling systems at French supermarkets
- Tuesday, 13 October 2026, 20:59 France reports cyberattack affecting 700 supermarkets (this article)
More on this in Dutch media
- NOS — „frankrijk cyberaanval”
- Het Parool — „frankrijk cyberaanval”
- NRC — „frankrijk cyberaanval”