Industry specialists suggest that the use of end-of-life hardware, such as the AK-SC 355, left many retail locations defenseless against modern hacking techniques. This vulnerability became a stark reality when a coordinated cyberattack struck hundreds of French supermarkets, transforming essential cooling units into heaters overnight. By exploiting remote management interfaces, attackers gained control over the digital thermostats that regulate everything from walk-in freezers to dairy displays. The breach was not a simple denial-of-service attack but a precise manipulation of operational settings, forcing equipment into defrost cycles that pushed internal temperatures to a staggering 50°C. Retailers like Intermarché and Carrefour found themselves facing an unprecedented crisis as the very systems designed to preserve food safety were weaponized against their inventory. This incident underscores the physical consequences of digital neglect, demonstrating how legacy industrial controllers can become critical failure points in 2026.
1. The Vulnerability: Exploiting Legacy Industrial Control Systems
The technical heart of this crisis lies in the longevity of industrial equipment, which often outlasts its digital security support. Danfoss, a leader in refrigeration technology, had previously flagged several of the affected models as legacy hardware. The AK-SC 355, for instance, was phased out as far back as 2016, while the AK-SM 800 reached its official end-of-life status in May 2021. Despite these warnings, many supermarkets continued to rely on these controllers to manage their complex cooling environments. Because these devices no longer receive software patches or security updates, they represent a permanent open door for malicious actors. When these controllers are connected directly to the public internet without the protection of a robust firewall or a virtual private network, they become easy targets for automated scanning tools used by hackers to identify vulnerable industrial control systems. The lack of encrypted communication in older models further simplifies the process of unauthorized remote access.
Interestingly, the attack was not limited solely to obsolete hardware, as some installations of the current AK-SM 800A model were also successfully compromised. Investigation into these breaches revealed that the units were running outdated firmware versions, leaving them exposed to known vulnerabilities that had already been addressed in more recent software releases. For example, older versions of the firmware lacked the Strict Session Control features that became standard in 2026, which enforce secure HTTPS connections by default. This suggests that even when organizations invest in modern hardware, a failure to maintain a rigorous patching schedule can lead to the same catastrophic results as using legacy equipment. The attackers were able to bypass authentication or inject commands because the administrative interfaces were accessible via the open web. This situation highlights a pervasive issue where the physical convenience of remote maintenance by third-party contractors is prioritized over the principles of network segmentation.
2. The Financial Fallout: Food Waste and Physical Damage
The immediate impact of the breach was felt most severely by the Intermarché and Netto chains, both owned by Les Mousquetaires. They reported that at least 300 of their locations were hit by the digital intrusion, leading to a total loss of temperature-sensitive inventory. In these stores, the attackers did not just shut the power off; they actively recalibrated the systems to generate heat, effectively cooking the refrigerated goods. This forced management to order the immediate disposal of massive quantities of meat, dairy, and frozen products to ensure consumer safety. The logistical challenge of clearing out and restocking hundreds of stores simultaneously created a ripple effect through the local supply chains. While some retailers managed to detect the temperature spikes early enough to move goods to unaffected backup storage, those without 24-hour onsite monitoring or automated alert systems found their shelves filled with spoiled products by morning. This discrepancy highlights how varying resilience levels dictate costs.
In contrast to the heavy losses at Intermarché, Coopérative U reported a more controlled situation, where only a minority of their 80 affected stores suffered significant stock damage. The chief executive credited this to the rapid response of local staff and refrigeration contractors who manually overrode the digital controls once the anomalies were detected. However, even without the loss of all goods, the financial burden remains substantial. Thierry Cotillard, head of Les Mousquetaires, estimated that the total losses across the French retail sector could reach tens of millions of euros when accounting for discarded food, equipment decontamination, and lost sales. Furthermore, some reports indicated that the extreme temperatures caused certain refrigeration components to overheat to the point of catching fire, introducing physical danger to the digital threat. The long-term damage to brand reputation is also a major concern, as consumers may feel hesitant to shop at retailers where the integrity of the cold chain has been so publicly and effectively compromised.
3. Security Measures: A Mandatory Framework for Incident Response
To address the ongoing threat and prevent secondary infections, CERT-FR, France’s national cybersecurity agency, issued a mandatory protocol for all affected refrigeration operators. The first critical step in this recovery process is to restrict connectivity immediately by blocking all network access to the controllers. This ensures that attackers cannot maintain a persistent foothold or re-enter the system during the remediation phase. Once the device is isolated, any remote management must be strictly limited to authorized service providers through secure channels. The second phase involves a complete restoration of the hardware to its original factory settings. This restore defaults procedure is essential for clearing out any malicious scripts or unauthorized configuration changes that the hackers might have implemented. Following the reset, the third step requires administrators to install all available patches and firmware fixes. For modern units like the AK-SM 800A, this means upgrading to the latest software packages to close known security loopholes.
The latter half of the security protocol focuses on identity management and clean reconfiguration to ensure long-term stability. The fourth step mandates a comprehensive reset of all credentials, which includes changing device passwords and any digital secrets used for API access or encrypted communication. It is vital that these new passwords are complex and unique to each individual device to prevent lateral movement by attackers across a network. Fifth, an audit of permissions must be conducted to review all existing user accounts. This process involves deleting any profiles that were created by the attackers or that belong to former employees and third-party contractors who no longer require access. Finally, the sixth step is to perform a full setup of the device configuration from a clean state. This involves re-entering operational parameters manually rather than restoring from a potentially tainted backup file. By following these rigorous steps, supermarket operators can verify that their cooling systems are free from lingering threats.
4. Future Mitigation: Strengthening the Cold Chain Infrastructure
Beyond immediate recovery, the broader industry must adopt a more proactive stance toward industrial internet-of-things security. Experts strongly advise that refrigeration controllers should never be exposed to the public internet. Instead, remote management should be handled through a secure, filtered connection such as a Virtual Private Network or restricted to a specific list of trusted IP addresses. Implementing multi-factor authentication for all administrative log-ins would also add a critical layer of defense that was notably absent in many of the recent French breaches. Additionally, Danfoss and other manufacturers recommend that companies prioritize the replacement of obsolete hardware that has passed its support lifecycle. While the capital expenditure of replacing hundreds of controllers is significant, it pales in comparison to the potential loss of millions of euros in stock and the catastrophic disruption of store operations. In 2026, the convergence of physical and digital systems requires a major shift in safety priorities.
In the aftermath of this widespread disruption, the French government and private retail sectors collaborated to redefine the safety standards for automated food storage. The Paris prosecutor’s office initiated a formal inquiry to identify the perpetrators and evaluate the full scope of the economic damage caused by the hijackings. Meanwhile, ANSSI shared intelligence with neighboring European nations to ensure that similar vulnerabilities in their own retail networks were identified and mitigated before attackers could strike again. Many chains began transitioning toward centralized, cloud-based monitoring systems that offered enhanced security features and real-time anomaly detection, moving away from fragmented, legacy hardware. The industry recognized that the digital security of a supermarket was now as fundamental to food safety as the physical cleanliness of the premises. By the end of the response efforts, retailers had implemented more robust network segmentation, ensuring that refrigeration systems remained isolated from public networks.
