khoji parkTechnology · Supermarkets across France · 2026
The Night the Supermarket Fridges Turned Hot
The computers were still running. The cold chain was failing.
Read in slides1. The Attack Beyond the Checkout
On the night of 11 October 2026, refrigeration equipment at French supermarkets was remotely manipulated. This was not simply a payment terminal refusing a card. Controllers responsible for keeping food cold were affected, bringing the consequences of a cyberattack into the aisles where perishable products were stored overnight.
The computers were still running. The cold chain was failing.
2. Defrosting at the Wrong Time
Reports from affected shops described refrigeration systems entering prolonged or abnormal defrost cycles. Temperatures rose while stores were closed or lightly staffed. Equipment intended to maintain safe conditions had become the route to destroying those conditions, leaving workers to discover stock that could no longer be sold when normal business resumed.
An automated maintenance function had become the source of damage.
3. The Stock Cannot Wait
Multiple supermarket groups reported disruption, discarded products and the work of restocking. Unlike a delayed website, spoiled food cannot be restored by bringing a server back online. The immediate losses were physical and local: businesses had to clear shelves while also making sure the underlying equipment was safe to use again.
Reopening a system would not refill a single fridge.
4. The Controllers Come Into View
France’s CERT-FR issued an alert naming affected remote refrigeration-controller families from Danfoss, Copeland and Dixell. The agency confirmed numerous compromises. Its guidance focused on removing exposed management interfaces from the public internet and restoring protected access, connecting individual supermarket incidents to a shared technical exposure across many installations.
Different shop signs were concealing similar equipment.
5. A Reset Is Not the Ending
The official alert was updated as investigators learned more. CERT-FR warned that resetting a compromised controller was insufficient if it remained exposed and vulnerable. Stores and their service providers therefore faced two jobs: recover the equipment and close the route that had allowed someone else to control it remotely.
The restart button could not finish the investigation.
6. The Numbers Were Still Moving
Early reports gave varying totals for affected stores and financial damage. As of the 18 October editorial review, the incident was recent and the perpetrators had not been publicly established. The evidence supported a widespread refrigeration attack, without supporting every dramatic estimate or a claim that the national food supply had collapsed.
The damage was real before the final total was known.
7. A Different Kind of Empty Shelf
The episode placed ordinary shop infrastructure at the centre of a national security warning. Remote maintenance made equipment convenient to manage, but exposed controls created a route for disruption. The story ended with recovery and investigation still continuing, while businesses dealt with losses that could not be reversed by deleting malicious code.
The hack was digital. The empty shelves were not.