Hackers Shut Down Refrigerators at Hundreds of Intermarché Stores in France

Unknown cybercriminals broke into the internal network of French retailer Intermarché and remotely disabled refrigeration systems at hundreds of stores across the country. Hi-Tech reports this, citing Reuters. The result: tons of spoiled perishable food that had to be written off.

At the time of publication, details are scarce. That matters here, so below we separate confirmed facts from the general mechanisms by which such attacks usually work.

What is known so far

The source reports a breach of the internal network and a remote shutdown of refrigeration equipment. The stores themselves kept operating, but refrigerated display cases and cold storage rooms stopped working. For grocery retail this is the worst-case scenario: computers can be restarted, but spoiled meat and dairy cannot be saved.

• Target: Intermarché, a French supermarket chain.
• Scale: hundreds of stores across France.
• Method: access to the internal network and remote shutdown of refrigeration systems.
• Consequences: loss of perishable food, amounting to tons.
• Perpetrator: not identified.
• Not disclosed: how the attackers got in, whether a ransom was demanded, the recovery timeline, the total cost of the damage.

Why the refrigerators were vulnerable

Industrial refrigeration equipment in supermarkets stopped being standalone long ago. Compressor stations and display cases are fitted with network-connected controllers: they report temperatures, accept new setpoints, and send diagnostics to service contractors. If this segment is not adequately separated from the corporate network, a single stolen account can give an attacker control of the equipment.

How the attackers operated in this case has not been reported. The general logic is as follows. Stopping the compressors or shifting the temperature threshold is enough: within a few hours, food moves outside the safe storage range. Cold-chain rules leave no room for judgment: goods that sat at the wrong temperature must be discarded, even if they look fine.

Another problem is that these systems are rarely protected as carefully as payment systems. Controller firmware goes years without updates, remote access for contractors is configured for convenience, and temperature monitoring often depends on the very network that was attacked.

Who pays for an attack like this

Grocery retail runs on thin margins, and the damage comes from several sources: the cost of written-off goods, lost revenue during downtime, the cost of investigation and recovery, and reputational damage. For a chain with hundreds of locations, even a short outage turns into a logistics operation: emergency purchasing, redistribution of stock, negotiations with insurers.

The regulatory backdrop is also shifting. The EU's NIS2 directive extended cybersecurity requirements to sectors involved in the production and distribution of food. Incidents like this strengthen the argument that the cold chain counts as critical infrastructure.

What to check right now

The incident works as a checklist for any company with warehouses, stores, or server rooms that run managed equipment:

• Separate the equipment management network from the office and guest networks. Any access between them should be explicit and logged.
• Enable multi-factor authentication for all contractors with remote access.
• Install independent temperature sensors with a local siren and SMS alerts that do not depend on the main network.
• Log all setpoint changes and set up alerts for unusual commands.
• Write down a manual procedure: who decides to move goods to backup cold rooms, and how quickly.
• Run a drill for the scenario "cooling is off for six hours" and calculate how much stock can be saved.

For those building AI-based monitoring systems, the takeaway is also practical: a model that catches anomalies in temperature time series is useful only if its data and alert channels are protected at least as well as the equipment itself. Official confirmation of the attack's details should be awaited from the chain itself and from French regulators.