Cold Rooms Became the Attack Surface
A cyberattack became a cold-chain failure during the night of 11 to 12 October.
French retailers confirmed refrigeration disruption at more than 400 shops. AFP reports at least 300 Intermarché or Netto stores, over 100 Coopérative U outlets and several E. Leclerc locations.
The damage reached the cold chain
An official Intermarché notice for Gradignan says the shop discarded all frozen goods and paused frozen collection and home delivery. Its expected 14 October return is local guidance, not national recovery.
Paris prosecutors opened an investigation into reported food losses, damage and fires. No cited source names an actor, entry method, malware or data theft.
Legacy control equipment is part of the investigation
Danfoss told AFP that most affected equipment was unsupported legacy technology. It named AK-SM800 and AK-SC355 controllers and outdated firmware on one AK-SM800 version.
That does not prove one model, flaw or entry path across every store. No exact CVE is tied to this incident.
What operators should check now
Start with a named inventory of refrigeration controllers, gateways and monitoring services. Record the owner, model, firmware, support status and every route from the internet or a supplier network. Remove unnecessary exposure, restrict administration to controlled paths and separate monitoring access from control access.
Alert on unexpected defrost commands, set-point changes, disabled alarms and new remote sessions. Prepare manual temperature checks and escalation that work when the management layer is unavailable. Preserve controller, gateway, identity and network logs before reset, so recovery does not erase evidence.
Sources: Intermarché Super Gradignan; AFP.
