Retrofit Relay
industry

Massive Cyberattack Targets Refrigeration Systems at French Supermarkets

October 16, 2026 · ACHR News · Score: 52

Hundreds of French supermarkets, including Intermarché, Carrefour, Monoprix, and Coopérative U, were hit by a cyberattack starting October 11 that targeted their refrigeration control systems. Hackers remotely accessed the equipment and messed with defrost settings, pushing some refrigerator and freezer temperatures up to 122°F. The result was widespread spoiled food, some fires, and disruption at about 700 of France's 10,000 supermarket locations. French authorities are investigating, and the national cybersecurity agency warned that similar attacks may still be happening, since affected equipment from brands like Danfoss, Copeland, and Dixell remains vulnerable if left connected to the internet without updates.

This is a commercial refrigeration story, not a home appliance one, so it does not affect your kitchen fridge or freezer. But it is a reminder of how connected equipment, like the smart thermostats, heat pumps, and energy management systems increasingly installed in homes, can be exposed if left online without updated security. Danfoss said many of the affected controllers were old enough that they no longer received software updates, and cybersecurity scans found thousands of similar refrigeration systems worldwide still reachable over the internet.

For homeowners with any kind of connected or "smart" home equipment, the practical lesson is similar to what security agencies recommend for businesses: keep device software and firmware current, use strong unique passwords instead of factory defaults, and avoid leaving control interfaces openly accessible online when they don't need to be.

Rebate alerts

Get rebate alerts for your state

Free weekly digest. Unsubscribe anytime. Privacy policy.

Program details
Technology
refrigeration controls

Rebates change. See what your state pays now.

Every federal, state, and utility program in one place, each stamped with the date it was last verified against the administering agency.