France Supermarket Cyberattack: How Hackers Targeted Smart Refrigerators and What It Means for You

A cyberattack on supermarket refrigeration systems in France caused food losses and raised concerns about connected devices, outdated software, and the growing cybersecurity risks associated with artificial intelligence.

France Supermarket Cyberattack: What Happened?

A cyberattack disrupted refrigeration systems at supermarkets across France on the night of October 11, raising concerns about the security of internet-connected equipment. According to reports, hackers gained remote access to refrigeration controls and altered settings, causing temperatures in some cold-storage areas to rise dramatically.

The incident reportedly resulted in significant food waste, equipment damage and financial losses for affected businesses. One Intermarché store in southwestern France reportedly lost around €21,000 worth of food after its storage area flooded.

The attack demonstrated how digital security failures can affect physical operations, even when attackers are not directly targeting customer information or financial accounts.

How Hackers Took Control of Supermarket Refrigerators

Internet-Connected Refrigeration Systems

Large supermarkets rely on digital control systems to maintain suitable temperatures, regulate cooling equipment and manage automatic defrost cycles. Some systems can also be monitored or adjusted remotely by technicians through Internet of Things (IoT) connections.

While remote access makes maintenance easier, it can create security risks when systems are poorly protected or left unpatched.

Outdated Software May Have Increased Vulnerabilities

Reports indicate that attackers accessed refrigeration controls and changed their operating settings. The precise method used to breach the systems has not been publicly established.

Once inside, the attackers reportedly extended defrost cycles from approximately one hour to as long as eight hours. These longer cycles allowed temperatures to rise, potentially damaging perishable goods and disrupting normal refrigeration operations.

In some locations, temperatures reportedly reached 50°C. Delayed alarms may also have reduced the time available for employees to identify the problem and take corrective action.

France’s cybersecurity incident response centre, CERT-FR, identified compromised refrigeration control systems associated with manufacturers including Danfoss, Copeland and Dixell. Authorities warned that related attacks could still be continuing, while the identity of the attackers remained unknown.

Why Are Hackers Targeting Smart Devices?

Cyberattacks are commonly associated with stolen passwords, financial fraud and data breaches. However, the French incident highlights another danger: attackers can manipulate connected equipment to cause physical damage and interrupt business operations.

Similar vulnerabilities could affect industrial machinery, building-management systems, security cameras, routers and smart home appliances. If attackers gain control, they may be able to disrupt services, change device settings or use compromised equipment as an entry point into other systems.

Many connected devices also receive security updates less frequently than computers and smartphones. Weak passwords, outdated firmware and exposed remote-access services can make these devices easier to compromise.

The incident therefore serves as a reminder that cybersecurity is not limited to protecting personal data. It is also essential for keeping physical infrastructure and everyday services operating safely.

Anthropic Warns About Potential AI-Powered Cyberattacks

Concerns about connected devices have intensified as researchers examine how artificial intelligence could assist cybercriminals.

Anthropic recently discussed experiments investigating whether smaller AI models could potentially replicate themselves across vulnerable internet-connected devices without requiring powerful data centres. The research explored how AI might identify weaknesses, exploit them and transfer itself between machines.

According to the report described in the supplied article, such capabilities could become more feasible as AI systems improve. A self-replicating malicious programme, commonly described as an AI worm, could potentially spread between vulnerable devices without requiring attackers to compromise each one manually.

However, these findings should not be interpreted as proof that an AI-powered worm caused the French supermarket incident. There is no confirmed evidence in the supplied reporting establishing that connection.

Cybersecurity Experts Raise Concerns About Critical Infrastructure

Cybersecurity researchers have warned that increasingly capable AI tools could make vulnerability discovery and cyberattacks more scalable.

Matthew Green, a professor at Johns Hopkins University, highlighted concerns about publicly accessible firmware images for critical infrastructure. Firmware is the embedded software that controls how devices operate. Studying it can help security researchers understand vulnerabilities, but attackers may also use that information to identify weaknesses.

Green also raised concerns about potential threats to air-gapped networks, which are designed to remain isolated from external networks. Although such separation can improve security, it does not automatically eliminate every possible attack route.

Andreas Stuhlmuller, co-founder of AI research company Elicit, has also warned that AI-assisted attacks could threaten essential services, including electricity, banking, water systems and internet infrastructure.

These warnings describe potential risks rather than confirming that widespread AI-driven infrastructure attacks are already taking place.

Should You Be Worried About Your Smart Home Devices?

The French incident does not mean that every internet-connected appliance is at immediate risk. However, it highlights the importance of securing devices that communicate online.

Consumers can reduce their exposure by following several basic precautions:

• Install security updates: Keep device software and firmware updated whenever manufacturers release patches.

• Change default passwords: Use strong, unique passwords for routers, cameras and smart appliances.

• Secure remote access: Disable remote-management features when they are unnecessary.

• Protect your home network: Use modern Wi-Fi security and a strong router administrator password.

• Replace unsupported devices: Consider replacing equipment that no longer receives essential security updates.

• Check device permissions: Review which devices can access your network and remove connections you no longer use.

Businesses operating refrigeration systems and other critical equipment should also restrict remote access, monitor unusual changes, maintain backups and ensure that alarms and manual safety procedures remain effective.

Conclusion: Connected Devices Need Stronger Cybersecurity

The cyberattack on French supermarket refrigeration systems illustrates how vulnerabilities in connected equipment can lead to real-world damage. As AI tools advance, organisations and consumers must strengthen device security, update outdated systems and monitor unusual activity. Better protection of digital infrastructure will be increasingly important for businesses and essential services alike.