Cyberattacks Disrupt Refrigeration Systems at European Supermarkets

PARIS (AP) — Cyberattacks have disrupted European supermarket chains, affecting refrigeration systems at hundreds of stores in France and forcing a major grocer to shut down websites serving customers in Europe and the United States. French Finance Minister Roland Lescure told Parliament on Tuesday that about 700 of the country's 10,000 supermarkets were affected. He stated there was no risk to France's food supplies but acknowledged that the attack "touches the heart of our food security." "It was a wake-up call for everyone," he said. The Paris prosecutor's office said Tuesday that its cybercrime unit was investigating the large-scale attack, including the extent of damage caused by spoiled food and reports of fires. French supermarket group Groupement Mousquetaires, which operates more than 4,000 stores across Europe, reported that 300 of its Intermarché and Netto stores were impacted. Some refrigerated and frozen food display cases remained out of service Tuesday. Dominique Schelcher, CEO of French grocery chain Cooperative U, indicated that 80 of the company's 2,000 stores were affected. Most managed to prevent disruptions to refrigeration, but some had to discard food, he said in a post on X. "Targeting equipment essential to the preservation of fresh products is an attack on the French food supply chain. It is unprecedented, extremely serious, and unacceptable," Schelcher stated. Carrefour and Monoprix supermarkets were also impacted. Danish technology company Danfoss, which supplied the refrigeration management software, noted that most affected systems were older products that no longer received software or security updates. "Danfoss has long advised customers to keep supported systems updated with the latest firmware, as well as to operate behind a firewall," the company said. Danfoss stated it was working with affected customers to limit the damage. Separately, Dutch supermarket giant Ahold Delhaize announced Tuesday it was working to restore systems it had shut down following what it described as a security issue. The company, which operates Albert Heijn in the Netherlands, Delhaize in Belgium and Stop & Shop in the United States, declined to provide further details. Websites for several of its brands, including Stop & Shop, Food Lion and Albert Heijn, remained offline Tuesday, although stores were open and serving customers. Ahold Delhaize stated it had no evidence that customer or employee data had been stolen. "Protecting our infrastructure in the best interest of our customers, associates and partners is a top priority," the company said. "We apologize for any inconvenience this issue may have caused customers and partners."