Hackers remotely took control of supermarket refrigeration systems across France, causing freezers to heat up, destroying food and reportedly starting fires. The attack raises serious questions about how vulnerable America’s own food supply is to cyberattacks.
Hackers managed to do something this weekend that should concern anyone who depends on a grocery store to feed their family. They remotely accessed refrigeration systems at hundreds of French supermarkets, forced the equipment into continuous defrost cycles, and reportedly pushed temperature settings as high as 122°F. By Monday morning, October 12, stores were dealing with ruined meat, dairy products, frozen food and, in some locations, reports of fires.
According to AFP, between 150 and 200 Intermarché supermarkets and nearly 100 Coopérative U locations were targeted. Other chains, including E.Leclerc, were also reportedly affected. French authorities have opened an investigation, and the full extent of the damage is still being determined.
The hackers reportedly exploited older refrigeration-control software from Danish manufacturer Danfoss. Rather than shutting the equipment off, they manipulated its defrost function, which normally runs for short periods to prevent ice buildup. The systems were instead forced to keep heating.
In Haguenau, a town in northeastern France, local supermarkets reportedly suffered hundreds of thousands of dollars in spoiled inventory. Across the country, losses could reach millions.
This wasn’t somebody stealing credit card numbers or breaking into a retailer’s customer database. Someone sitting behind a computer was able to interfere with physical equipment in hundreds of stores, destroying food that people depend on.
And there’s no reason to believe American supermarkets are immune to the same kind of attack.
The Systems Running America’s Grocery Stores Have Security Problems, Too
Most people have no idea how much of the modern food supply depends on internet-connected equipment. Refrigeration systems in supermarkets, warehouses and food-processing facilities can be monitored and controlled remotely. That makes maintenance easier, but it also creates another way for someone to interfere with the equipment.
Security researchers have been warning about these vulnerabilities for some time.
Researchers at Claroty’s Team82 identified security weaknesses in refrigeration controllers manufactured by Danfoss and Copeland. During testing, they demonstrated how attackers could manipulate refrigeration equipment and interfere with temperature readings.
Both manufacturers released firmware updates addressing identified security problems. But releasing an update and getting every supermarket, warehouse and refrigeration contractor to install it are two very different things.
Some of these systems have been operating for years, and stores may have little reason to replace equipment that appears to be working properly. Remote access originally installed for maintenance can also become a security problem when passwords aren’t changed or software isn’t updated.
We’ve already seen what happens when someone abuses that access. In the Netherlands, a former refrigeration contractor employee was sent to prison after using old login credentials to interfere with a supermarket’s refrigeration equipment.
The difference this time is the scale. Instead of one disgruntled employee targeting a single store, attackers in France managed to disrupt refrigeration across hundreds of locations.
We’ve Been Warning About Cyberattacks on Critical Infrastructure
For months, OFFGRID Survival has been covering warnings from cybersecurity researchers and AI industry insiders about attacks against the systems that keep modern society operating.
In April, we covered the growing threat of AI-powered attacks against infrastructure, banking and other essential services. More recently, we reported on warnings from AI industry insiders who expect a major cyberattack against banking, electrical or water infrastructure within the next year.
There is currently no evidence that AI was involved in the French supermarket attack, and investigators have not publicly identified those responsible. But the incident illustrates the kind of damage attackers can cause when they gain access to equipment that was never adequately secured.
We’re not talking about some hypothetical attack that might happen ten years from now. Hundreds of grocery stores just had their refrigeration systems compromised in a single night.
And while much of the discussion about infrastructure attacks focuses on electrical grids, water systems and financial institutions, the food supply has its own enormous vulnerabilities.
What Happens When the Food Supply Gets Hit?
Think about how much food in your local grocery store depends on refrigeration. Meat, milk, eggs, frozen vegetables, seafood, prepared meals and countless other products have to be kept at safe temperatures from the processing facility to the time someone takes them home.
A major disruption at a single supermarket is an expensive inconvenience. A coordinated attack against hundreds of stores, distribution warehouses or food-processing facilities could become a serious supply problem.
When refrigeration fails, stores cannot simply turn the equipment back on and start selling everything again. Once perishable food has been held at unsafe temperatures, much of that inventory has to be discarded.
Replacing it takes trucks, functioning warehouses, available inventory and suppliers capable of filling new orders. If enough facilities are affected at once, replacements could be difficult to find.
And the potential problems don’t end with spoiled groceries. Refrigerated medications and other temperature-sensitive supplies depend on many of the same kinds of cooling and monitoring systems.
The French attack also comes at a time when we’ve been reporting on rising diesel prices and problems affecting fuel supplies. Transportation problems and higher fuel costs would only complicate recovery from a widespread food distribution disruption.
Nobody is suggesting the French attack means American grocery stores are about to run out of food. But it should serve as another warning about how dependent we’ve become on technology that most people never see and have absolutely no control over.
What You Can Do to Protect Your Family
You can’t secure the computer systems running your local supermarket, and you probably have no idea which refrigeration equipment your grocery store uses. What you can control is how much your family depends on those stores being open and fully stocked every day.
Keep enough food at home to avoid depending on weekly grocery trips. At an absolute minimum, maintain two weeks of food your family regularly eats. A month or more gives you additional breathing room if a local disruption turns into a larger supply problem. Rice, pasta, canned meat, vegetables, soups and other shelf-stable foods are a good starting point. For longer-term storage, see our guide to foods that can last 25 years.
Don’t make your freezer your entire emergency food plan. Having a chest freezer packed with meat is great until the electricity goes out or the equipment fails. Keep canned proteins and other shelf-stable alternatives available. If you store large amounts of meat, consider learning proper pressure-canning techniques so you’re not relying exclusively on electricity to preserve it.
Have a way to monitor and power your own refrigeration equipment. An independent refrigerator/freezer thermometer with an alarm can warn you when temperatures rise. A properly sized backup battery, solar generator or conventional generator can help protect food during outages. The important thing is knowing how much electricity your equipment actually uses and having enough backup capacity to keep it operating.
Make provisions for refrigerated medications. If someone in your family depends on insulin or other temperature-sensitive medication, speak with your pharmacist about safe storage, backup cooling options and what to do during an extended outage.
Know where to get food outside the major supermarket chains. Local farmers, ranchers, independent producers and direct-to-consumer suppliers can provide additional purchasing options. They aren’t immune to refrigeration failures, but having more than one source for food is better than depending entirely on a single retail system.
For anyone operating a restaurant, butcher shop, grocery store or other business that depends on commercial refrigeration, this is also a good reason to contact your equipment contractor. Find out whether your refrigeration controllers have current security updates, whether they can be reached remotely, and who still has access to those systems.
America’s Food Supply Is More Vulnerable Than Most People Realize
For years, people have been told that cyberattacks are primarily about hackers stealing personal information, accessing bank accounts or holding computer files for ransom.
What happened in France is a reminder that these attacks can have much more immediate consequences. Hackers didn’t have to shut down the electrical grid or interrupt the country’s transportation system. They simply interfered with the computers controlling supermarket refrigeration systems, and hundreds of businesses were left dealing with spoiled food.
The attackers haven’t been identified, and investigators are still determining the damage. But the underlying problem isn’t going away. More of the equipment responsible for producing, storing and distributing our food is connected to networks that can potentially be compromised.
We’ve spent years warning readers that the modern food supply is nowhere near as reliable as most Americans assume. Whether the disruption comes from fuel shortages, natural disasters, electrical failures or hackers gaining access to critical equipment, the result can be the same: food that was available yesterday is suddenly unavailable today.
You don’t need to live in fear of every cyberattack overseas. But you should have enough food and supplies at home that a problem at your local grocery store doesn’t immediately become a problem for your family.