France's Supermarket Cyberattack Causes Millions in Losses

Investigators in France are examining an unprecedented cyberattack that targeted refrigerators in hundreds of supermarkets, causing food spoilage and significant financial losses. The attack, which occurred on Sunday, affected major supermarket groups, including Carrefour, Monoprix, Intermarche, and Cooperative U, according to Reuters.

France’s National Cybersecurity Agency and the Paris Public Prosecutor’s Office’s cybercrime division are both involved in the investigation. No group has claimed responsibility for the attack, which has left investigators puzzled. The impacted refrigerators used software developed by the Danish firm Danfoss, which noted that many of the affected units had reached the end of their life and no longer receive software or security updates.

The financial impact of the attack is still being assessed, but several supermarket chains have reported substantial losses. Thierry Cotillard, CEO of Intermarché, estimated losses could reach tens of millions of euros nationwide in a single day. Les Mousquetaires, the parent company of Intermarché, suggested losses could amount to several million euros. Dominique Schelcher, CEO of Cooperative U, indicated that losses for smaller supermarkets could total tens of thousands of euros, while larger locations could surpass 200,000 euros.

At least 350 supermarkets across France were impacted, though this represents a small fraction of the country’s total supermarkets. Les Mousquetaires reported that about 180 of its locations were affected, while Cooperative U stated that 80 of its stores were victims of the attack.

Ciaran Martin, former chief executive of the UK National Cyber Security Centre, described the attack as one of the oddest cyber events he has ever seen.

**Context:** This attack highlights the vulnerability of critical infrastructure to cyber threats and the potential for significant financial and operational disruptions. It underscores the importance of regular software updates and robust cybersecurity measures in protecting against such incidents.