When Hackers Melt Your Groceries, Supply Chains Have No Backup

The Temperature Rose to 50 Degrees. Then Everything Went Bad.

It started with the cold failing. In supermarkets across France, refrigeration units that were supposed to keep food safe at single-digit temperatures were cranked up to 50°C — not gradually, but suddenly, under remote control by someone who had found their way into the systems. The result was not data theft or encrypted files on a victim’s desktop. It was spoiled food, abandoned shelves, and, in some locations, fires.

This is not a drill. It is a case study in what happens when the infrastructure that keeps Western cities fed — already lean, already stretched thin — turns out to be running on hardware that no one patches anymore.

What Happened

France’s prosecutor’s office confirmed on October 12 that a coordinated cyberattack struck multiple major grocery chains. Carrefour reported 80 stores affected. Monoprix said five percent of its 490 locations were hit. Intermarché and its Neto banner — roughly 300 stores — saw the worst of it; the operator said the attackers raised temperatures overnight and then destroyed every contaminated product as a health hazard. Coopérative U lost about 100 stores.

The Danish refrigeration company Danfoss, which manages systems for some of these chains, confirmed it was aware of the incidents and cooperating with affected customers. But here is the detail that should keep anyone who relies on just-in-time grocery delivery awake at night: Danfoss told Bloomberg that the compromised units were older models no longer receiving software or security updates. The attackers did not need to breach a state-of-the-art network. They needed to find something old, connected, and unmonitored.

The attack is now believed to have reached beyond France. Felix Emer, a senior threat intelligence analyst at Secoia Institute, indicated that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected. EU Agriculture Commissioner Christophe Hansen called it “the instrumentalization of food” — a phrase that sounds abstract until you realize it describes exactly what happened: using food as the weapon by breaking the machines that keep it safe.

The Non-Obvious Thing Here

Everyone who covers cybersecurity immediately thinks about ransomware, about locked files and ransoms paid to cryptocurrency wallets. This attack looks different because the damage was physical. The hackers didn’t hold data hostage. They held groceries hostage — and the ransom was paid in rotting produce and closed aisles.

But the deeper pattern is what this reveals about the assumption behind nearly every modern supply chain: that you can optimize inventory to the point where a single failure cascades into shortage, and that the systems managing that optimization are secure by default. Neither assumption holds.

France’s supermarkets operate on tight replenishment cycles. When a refrigeration cluster goes down across hundreds of locations simultaneously, there is no buffer stock sitting in a warehouse waiting to be deployed. There are empty shelves. There are angry customers. And there is a scramble to understand whether the hardware running the cooling systems was ever secure in the first place — or whether it was simply assumed to be separate from the internet, a dangerous presumption that has been dying for years.

Who Wins, Who Loses

The hackers win in the most undignified sense possible. Whether this was financially motivated, politically motivated, or simply an act of disruption for its own sake, the impact ratio is staggering: a few lines of code inserted into legacy controllers, and you have created one of the most tangible supply-chain emergencies in recent European history.

The losers are ordinary people standing in front of empty refrigerated sections. The losers are also the retailers, who face not just the cost of replaced inventory but the far less quantifiable cost of trust. When customers learn that a supermarket’s cold storage can be remotely manipulated — and that the company may have been running outdated, unsupported equipment — that trust does not recover quickly.

The companies that built or sold the affected refrigeration units also face reckoning. Danfoss is cooperating, but the admission that older models lacked ongoing security support is damaging. These are industrial systems embedded in consumer-facing environments. The expectation is not that they be immune to hacking — it is that they be maintained, monitored, and updated. That expectation went unmet.

Why This Matters Outside France

The EU’s top agricultural official warned that this attack makes “food manipulation” a concrete reality, not a hypothetical risk. That framing matters because the vulnerability is not unique to France. The same chains — Carrefour, Danfoss equipment, legacy controllers running without updates — exist across Europe and, in many cases, in North America. The attackers proved that a single point of failure in refrigeration software could cascade across borders.

What makes this attack especially ominous is the implication for just-in-time logistics more broadly. The Western food supply has been optimized to such precision that any interruption to temperature-controlled storage ripples outward immediately. A week ago, the idea that hackers could attack refrigeration was the stuff of speculative essays. Now it is an investigative reality with hundreds of stores and half a dozen countries involved.

France’s prime minister has ordered the national cybersecurity agency ANSSI to lead the investigation. That is appropriate. But the investigation will not fix the underlying problem: vast swathes of physical infrastructure — refrigeration, water treatment, transportation scheduling — remain connected to networks and running on hardware whose vendors have moved on to newer products, leaving the old ones adrift.

What Comes Next

The immediate response will be emergency patches, temporary fixes, and a wave of press releases emphasizing vigilance. The long-term response needs to be structural. Legacy equipment in critical supply-chain roles cannot simply be assumed to be offline or isolated. The attackers proved otherwise.

For retailers, the lesson is stark: every piece of hardware that touches food safety, temperature control, or distribution logistics needs to be inventoried, classified by support status, and treated as a potential attack surface. For policymakers, the lesson is that food security is now a cybersecurity issue and must be governed as one.

The supermarkets in France will restock. The empty shelves will fill again. But the image of a supermarket with nothing behind glass doors — not because of a shortage, not because of a strike, but because someone turned up the thermostat — will linger. And it should.

This was not a hack of data. It was a hack of the physical world. That distinction changes everything.