# Cyberattack on French Supermarket Fridges Spreads to Europe and U.S. Retailer

> A cyberattack targeting supermarket refrigeration systems in France spread to other European countries and impacted a major multinational retailer's services in the United States, affecting approximately 700 stores in France alone.

By PrimaryBrief newsroom · Published 2026-10-21T00:34:04.399701Z
Canonical: https://primarybrief.com/article/cyberattack-on-french-supermarket-fridges-spreads-to-europe-and-u-s-retailer-d500d165

A cyberattack manipulating refrigeration systems in French supermarkets overnight from October 11 to 12, 2026, spread to other European nations and disrupted services for a major retail group in the United States, affecting approximately 700 stores in France alone [1][8][10][19].

This incident shows the vulnerability of critical food infrastructure to cyber threats, leading to widespread food spoilage and economic losses across multiple countries, and raising concerns about global food security [1][19][21].

## What the records show
The cyberattack, from October 11 to 12, 2026, targeted refrigeration systems in hundreds of French supermarkets [1][19]. Hackers manipulated temperatures up to 50°C (122°F) and 80°C, spoiling vast quantities of food and causing millions of euros in losses [1][19]. The French National Cybersecurity Agency (ANSSI) coordinated with other European agencies, as Spain, Portugal, Poland, Germany, and Belgium were also affected [11]. The vulnerability exploited was identified as Danfoss refrigeration control software, including obsolete units [7][11]. Dutch retailer Ahold Delhaize confirmed a cyberattack forced its systems offline across U.S. and European brands, disrupting online services [4][2].

## The timeline
From October 11 to 12, 2026, the supermarket refrigeration cyberattack began in France [1][19]. On October 12, Ahold Delhaize reported a network security issue, taking systems offline, including U.S. online banners [5][17]. The Paris prosecutor's office launched an investigation, and French Finance Minister Roland Lescure confirmed 700 affected supermarkets [8][18]. By October 16, France's cybersecurity authority warned the attacks were "likely still underway," with Danfoss software identified as the vulnerability [3][7][12]. On October 19, Ahold Delhaize confirmed malicious actors caused the incident, filing a police report [4][24]. By October 20, the company stated no sensitive data was stolen and began restoring services in Europe, with U.S. e-commerce expected soon [6][16].

## What changed and for whom
For consumers, the immediate impact included food waste and potential disruptions to grocery shopping in affected regions [1][9][21]. Supermarkets faced significant financial losses from discarded products and operational disruptions [1][9]. The incident prompted heightened concern among authorities about the security of critical infrastructure, particularly in the food supply chain [1][12][20]. The French National Cybersecurity Agency (ANSSI) initiated coordination with other European cybersecurity bodies, indicating a broader recognition of systemic vulnerabilities [11].

## What the subject has said publicly
Ahold Delhaize announced on October 12, 2026, that it was "experiencing a security issue within its network" and was taking steps to "assess and mitigate the issue," including taking some systems offline [5]. The company later confirmed on October 19 that the incident was a cyberattack by malicious actors [4]. On October 20, Ahold Delhaize stated that its investigation had found no evidence of sensitive customer, associate, or partner data theft [6]. The company also reported that it had restored many European websites and apps and anticipated U.S. e-commerce brands would be back online within days [16].

French Finance Minister Roland Lescure told Parliament that while about 700 supermarkets were affected, there was "no risk to France's food supplies" [8]. However, he acknowledged that the attack "touches the heart of our food security" [8]. The Paris prosecutor's office confirmed an investigation into the attack [18].

## What we could not confirm
The precise scale of the impact in Spain, Portugal, Poland, Germany, and Belgium, including whether retail networks were intentionally targeted in those countries, remains unclear [11].
The identity of the attackers and their specific motivations have not been publicly confirmed [22].
The full extent of financial losses for all affected retailers outside of France has not been detailed [1][19].

## Evidence cited
1. Not cool: who hacked France’s supermarket fridges? (www.theguardian.com) — https://www.theguardian.com/world/2026/oct/17/who-hacked-frances-supermarket-fridges
2. Ahold Delhaize: Cyberattack affects services across US and Europe (www.bleepingcomputer.com) — https://www.bleepingcomputer.com/news/security/ahold-delhaize-cyberattack-affects-services-across-us-and-europe/
3. (October 18 2026) Readers tracking the story should watch for updates from the Paris prosecutor's office and any further retailer disclosures as the clearest signals of where this heads next. Frequently asked questions. Is the French supermarket cyberattack over? Not confirmed. France's national cybersecurity authority said as of October 16 that the attacks were
... — https://shattered.io/
4. (October 19 2026) Ahold Delhaize, the Dutch multinational grocery chain, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic. The company confirmed that the suspicious activity it announced detecting in its IT systems last week was caused by malicious actors, adding that it filed a police report in the Netherlands on Monday. The incident disrupted online services in the U.S., Netherlands an — https://therecord.media/
5. (October 12 2026) Zaandam, the Netherlands, October 12, 2026 – Ahold Delhaize is experiencing a security issue within its network. Our teams are taking steps to assess and mitigate the issue. This includes taking some systems offline to help protect them. At this time, our stores are open and serving customers.Protecting our infrastructure in the best interest... — https://aholddelhaize.com/
6. (October 20 2026) ... on Mon., Oct. 12, 2026, due to a cybersecurity issue with parent company Ahold Delhaize. Peyton Bigora/Grocery Dive, data from 10/12/2026. Listen to the article 2 min. This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Ahold Delhaize said Monday that there is no evidence that any sensitive customer, associate or partner data was taken during the cybersecurity incident that the company disclosed last week. The investigation is still ongoing, t — https://grocerydive.com/
7. (October 16 2026) Following reports of cyberattacks on French supermarket refrigeration systems that disrupted hundreds of stores overnight from Oct. 11 to 12, 2026, forcing them to discard fresh and frozen food after attackers manipulated temperature controls and defrost settings, the vulnerability has been identified. The attack exploited refrigeration control software supplied by Danish company Danfoss, with affected equipment reportedly including obsolete units that no longer receive softwar — https://industrialcyber.co/
8. (October 13 2026) PARIS — Cyberattacks have disrupted European supermarket chains, affecting refrigeration systems at hundreds of stores in France and forcing a major grocer to shut down websites serving customers in Europe and the United States. French Finance Minister Roland Lescure told Parliament on Tuesday that about 700 of the country's 10,000 supermarkets were affected. He said there was no risk to France's food supplies but acknowledged that the attack “touches the heart of our food secu — https://latimes.com/
9. (October 13 2026) Intermarché is among the European grocery store companies whose refrigeration systems were breached on Oct. 12, 2026, causing widespread loss of refrigerated products. AdrianHancu via Getty Images. Dive Brief: Hundreds of European supermarkets were forced to throw away tens of millions of dollars worth of grocery products Monday when hackers accessed a network-vulnerable control system and locked refrigeration units into defrost mode for several hours, according to news reports — https://facilitiesdive.com/
10. (October 17 2026) This attack underscores the vulnerabilities in critical infrastructure and the potential for widespread economic disruption. What happened (in 30 seconds). On October 11-12, 2026, a cyberattack compromised refrigeration controllers in approximately 700 supermarkets across Europe. Attackers exploited known vulnerabilities in legacy IoT devices, causing temperatures to rise to 50°C (122°F) and resulting in significant food spoilage. French authorities launched an investigation as — https://a47news.ai/
11. (October 13 2026) Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers. Swati Khandelwal  Oct 13, 2026Cyber Attack / Network Security. Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfo — https://thehackernews.com/
12. (October 16 2026) As French Supermarkets Try to Restock, They Are Told Cyberattack May Be Ongoing. October 16, 2026 by John Leicester and Mike Corder. France's cybersecurity authority has warned that a cyberattack targeting supermarkets may still be ongoing as stores restocked Wednesday after the attack sent refrigerator temperatures soaring, raising concerns about the security of vital food supply chains. The agency said Tuesday night that the attacks were “likely still underway.” It urged stor — https://insurancejournal.com/
13. (October 12 2026) Cyberattack Targets French Supermarket Refrigerators, Forcing Mass Food Disposal. Hackers took advantage of a software vulnerability, proving again that any connected appliance on the internet can be a target. Omar Gallaga. Omar Gallaga has covered technology, digital culture and other topics for outlets including CNET, NPR, Wired, Texas Monthly, MSNBC, Consumer Reports, The Washington Post, the Los Angeles Times, The Atlantic and the Austin American-Statesman, where he was ... — https://cnet.com/
14. (October 17 2026) The Paris public prosecutor's office immediately opened an investigation into the latest in a series of cyber-attacks that have made France the most hacked country in Europe. Gérôme Billois, a partner in the cybersecurity and technology company Wavestone, said the hack had the hallmarks of political sabotage. “The two most feasible scenarios are either it was a group of youngsters or activists who wanted to blow up a few freezers to prove what they could do, or it was a destabi — https://theguardian.com/
15. Ahold Delhaize: Cyberattack affects services across US and Europe (www.bleepingcomputer.com) — https://bleepingcomputer.com/news/security/ahold-delhaize-cyberattack-affects-services-across-us-and-europe/
16. (October 20 2026) The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. By. Ionut Arghire. Published. 4 minutes ago. Ahold Delhaize hacked. Dutch-Belgian grocery giant Ahold Delhaize has restored some of the services impacted by last week's cyberattack and expects more to come back online within days. On October 12, the company took its systems offline in response to “a security issue” within its network, which impacted its onli — https://securityweek.com/
17. (October 12 2026) People also ask. Loading questions... Strategy · Breaches · Vulnerability · Cyberattacks · Threats · Leadership & Careers · Policy & Regulation. An article from site logo. Dive Brief. Ahold Delhaize experiencing cybersecurity issue. The company said it took some systems offline as part of “precautionary measures.” Websites for all five of the grocer's U.S. banners were down Monday morning. Published Oct. 12, 2026. Peyton Bigora's headshot · Peyton Bigora Reporter. Share. Copy l — https://cybersecuritydive.com/
18. (October 12 2026) The office of the Paris prosecutor confirmed to AFP that an investigation has been opened into "the large-scale cyberattack affecting the refrigerators of several major food retail chains across France." The probe will help "identify the victims and establish the link with the damage they reported in terms of foodstuff losses and the outbreak of fires," the prosecutor's office said. Intermarché condemned the food waste and financial losses resulting from the attack, without pro — https://cbsnews.com/
19. Not cool: who hacked France’s supermarket fridges? (www.theguardian.com) — https://theguardian.com/world/2026/oct/17/who-hacked-frances-supermarket-fridges
20. (October 12 2026) The incident comes against a backdrop of growing concern about the devastation that cyberattacks by malicious actors could cause across all sectors in Europe. President Emmanuel Macron, a staunch supporter of Ukraine in its fight against the Russian invasion, last month ordered the implementation of measures to protect France's critical infrastructure
... — https://euronews.com/
21. (October 14 2026) Mountains of fresh and frozen food had to be thrown out after hackers cranked the temperature of refrigerators in supermarkets across France. Experts say it could signal a new cybersecurity threat that could impact Americans as well. NBC's Tom Costello reports. For more context and news coverage of the most important stories of our day, click here: https://www.nbcnews.com Every day, NBC News helps people understand what's happening and why it matters — through fact-based report — https://youtube.com/
22. (October 13 2026) French Investigators Probe Supermarket Cyberattack That Could Cost 'Millions Of Euros'. ByConor Murray,. Reporter. Murray is a Forbes news reporter covering entertainment trends. Follow Author. Oct 13, 2026, 11:07am EDT Oct 13, 2026, 04:06pm EDT ... Key Facts. France's National Cybersecurity Agency is investigating the attack, but no hackers have claimed responsibility, which has puzzled investigators, Reuters reported, citing sources familiar. The attack, which took place Sund — https://forbes.com/
23. (October 12 2026) Supermarkets were forced to discard large quantities of perishable food, while the Paris prosecutor's office confirmed an investigation into reported damage, including food losses and fires. The precise causes of the reported fires and the full extent of the financial losses had not been established (AFP, 2026; Marchandon and Stargardter, 2026)
... — https://diplomacyandlaw.com/
24. (October 19 2026) AMSTERDAM, Oct 19 — Retailer Ahold Delhaize reported a cybersecurity incident to Dutch police on Monday ​after it detected suspicious activity in its infrastructure, the company said, adding it took some systems offline as a precaution earlier this month. Although only ​reported to the police on Monday, the incident coincided with a cyberattack in France that caused refrigerators and ​freezers at hundreds of stores to ​heat up to 50 degrees Celsius (122 degrees ​Fahrenheit) ove — https://ksl.com/
25. (October 12 2026) In its official statement, Ahold Delhaize described the shutdowns as protective measures. “Protecting our infrastructure in the best interest of our customers, associates and partners is a top priority,” the company said, apologizing for inconvenience caused to customers and partners. Ahold Delhaize Cyberattack. The disruption has affected several customer services. According to DutchNews, Albert Heijn's website, app and home delivery service became unavailable after parts of i — https://cybersecuritynews.com/
26. (October 20 2026) The IT incident that affected Ahold Delhaize was, after all, a cyberattack, as evidenced by the fact that the retailer filed a complaint with the Dutch police on Monday. The company is now making progress in restoring all services to full operation. “Malicious actions”. The suspicious activities that led Ahold Delhaize to proactively take its online stores, apps, and other systems offline were the result of “malicious actions of others,” the retailer said in an update Monday ev (retaildetail.eu) — https://retaildetail.eu/
27. (October 19 2026) By Charlotte Van Campenhout. AMSTERDAM, Oct 19 (Reuters) - Retailer Ahold Delhaize reported a cybersecurity incident to Dutch police on Monday after it detected suspicious activity in its infrastructure, the company said, adding it took some systems offline as ​ a ​precaution earlier this month. Although only reported to the police on Monday, the incident coincided with a cyberattack in France that caused refrigerators and freezers at hundreds of stores to heat up to ​50 degree — https://euronext.com/
28. (October 19 2026) The Dutch National Cyber ​Security Centre said there ​was ​no reason to believe the incident in the Netherlands was directly linked to any cyberattacks in other countries. Delhaize said its investigations found the suspicious activity had resulted from the "malicious actions of others", without specifying who might be responsible. — https://channelnewsasia.com/
29. (October 13 2026) On the night of 11–12 October 2026, attackers remotely took control of Danfoss refrigeration management systems at an estimated 250 to 350 French supermarket stores. They triggered continuous defrost cycles that drove case temperatures as high as 50 °C for several hours and spoiled fresh and frozen stock on a large scale. The same weekend, Dutch retailer Albert Heijn, part of Ahold Delhaize, experienced a separate cybersecurity incident that forced systems offline and disrupted — https://threatlandscape.io/
30. (October 16 2026) Danfoss cyberattack: supermarket refrigeration controllers hijacked. A night of forced defrost. During the night of Sunday October 11 to Monday October 12, 2026, the refrigerated cases of several hundred French supermarkets started to heat up. The attackers never had to set foot in a store. They went through the system manager, the small server that runs a store's entire refrigeration plant, and triggered defrost cycles over and over, with absurd setpoints. By morning, fresh an (flawfence.com) — https://flawfence.com/
31. (October 13 2026) Hundreds of French supermarkets hit by fridge cyber attack; Hackers reportedly raised temperatures to 50°C overnight; Food thought to be worth millions of euros was spoiled; Major chains including Carrefour and E.Leclerc affected; Experts warn connected food systems are growing cyber targets. Hundreds of French supermarkets experienced a cyber attack on October 12. The attackers took control of fridges and heated them to 50°C (120°F) for several hours overnight. Food thought to — https://foodnavigator.com/
32. (October 14 2026) A supermarket cyberattack hit refrigeration systems at about 700 French stores. Here's what it means for U.S. grocers ... Felix Aime, a senior cyber threat intelligence analyst at Sekoia Threat Detection and Research, said the attack also reached Spain, Portugal, Poland, Germany and Belgium. Outdated Firmware at the Center. The attackers targeted a single, widely used technology. French broadcaster BFMTV reported that hackers struck refrigeration control systems made by Danish  — https://abasto.com/
33. (October 16 2026) A cyberattack targeting Danfoss refrigeration controllers has caused over 700 French Supermarkets to defrost, overheat, and even cause smoke and fires, resulting in financial losses and food waste. While refrigerators defrost overnight, the cyber attack caused them to overheat, reaching up to 122 degrees Fahrenheit (50 degrees Celsius). - Advertisement -. - Advertisement -. Several food distributors, including Intermarché, Coopérative ... The cyber attack also affected cold ref — https://cpomagazine.com/
34. (October 12 2026) Hackers caused refrigeration systems at hundreds of French supermarket stores to heat up overnight, raising temperatures in some fridges and freezers to 50 degrees Celsius (122 degrees Fahrenheit), spoiling food and triggering fires, according to a Reuters report on Monday. The Paris prosecutor's office said a “large-scale” cyberattack was affecting connected refrigeration systems at several major food retailers across France, resulting in food losses and fires. Prime Minister  — https://calcalistech.com/