The cyberattack, which began on Sunday evening, enabled attackers to take control of refrigeration equipment in hundreds of French supermarkets. The attackers changed temperature settings and switched the systems to continuous defrost mode, which led to a sharp rise in temperature up to 50 °C and product spoilage.
Major retail chains were affected, including:
- Intermarché
- Netto
- Carrefour
- Coopérative U
According to experts, outdated versions of Danfoss software were targeted, making it possible to remotely manipulate the operation of refrigeration equipment without staff intervention.
💶 Millions of euros worth of fresh and frozen products were put at risk. Coopérative U CEO Dominique Schelcher confirmed the attack and said that the company’s teams, together with refrigeration specialists, are making every effort to restore normal operations as quickly as possible, calling the incident unprecedented and unacceptable.
Danfoss has not yet provided official comments; however, the company Claroty previously published a report on vulnerabilities in Danfoss AK-SM 800A controllers that allow interference with physical temperature parameters.
Key details:
- the vulnerabilities were fixed in firmware R4.3.1;
- Danfoss is currently taking additional measures to mitigate the consequences of the attack.