Analysis: Cyber-attack on supermarket refrigerators and freezers in France on Sunday 11 and Monday 12 October 2026 caused major consequences for food security.

Background: A cyberattack targeting the computer systems controlling supermarket refrigeration equipment took place in France on October 11 and 12, 2026. The weaknesses had been identified by the equipment manufacturers and involved older computer interfaces not being updated. The intentions were clearly malicious as the remote takeover of the equipment triggered a defrosting mode for the refrigerated cabinets (both positive and negative temperature) at the end of a weekend. Because the equipment switched to defrost mode, the alarms did not activate. Hundreds of pieces of cabinets were affected. 

 

The international CODEX regulation for frozen foods is aligned with European regulations and allows +3°C for transport and +6°C for distribution, compared to the international standard of -18°C for frozen storage.  

 

Refrigerated products are usually stored at 4/5°C. Maintaining the correct temperature is essential for the safety of perishable goods, and any break in the cold chain can accelerate the growth of microorganisms and render food unfit for consumption. In this case, it was not possible to ensure consumer safety and so waste was very significant, reaching approximately 12 tons for the Paris region. Waste across the whole of France could not be quantified. 

 

This type of incident reveals a direct risk to food security and the vulnerability of food infrastructure to cyberattacks on a national scale. Individuals could be affected because most household appliances are connected via Wi-Fi or Bluetooth, and default passwords (e.g., "0000") are often left unchanged. 

 

The management and potential disposal of the wasted food has also emerged as a major problem. The very large volumes involved quickly posed health problems, and issues surrounding its disposal had to be resolved. While some by-products from the agri-food industries can be used as animal feed, products unfit for consumption must be destroyed (incinerated) or, potentially, valorised through anaerobic digestion. 

 

From an insurance standpoint, it appears that the supermarkets in question did not have a clause covering this type of incident; technical faults and power outages were covered but not cyberattacks of this kind. Legal departments are now involved and are investigating responsibility within the decision-making chain: lack of information from equipment manufacturers, lack of foresight on the part of maintenance companies, and the liability of supermarkets. 

 

In conclusion, this cyberattack that affected supermarket refrigeration may well mark a turning point in the history of modern food preservation, presenting digital, health, economic, and environmental challenges. One recommendation that could be made to consumers would be to change the passwords on their home appliances as an initial form of protection at the household level, and to install recorders to monitor the temperature of these appliances.