France's Fridge Fiasco: When Supermarket Freezers Become Political Battlegrounds
Last Sunday, shortly before midnight, France's supermarket cold aisles became an unwitting front in a bizarre and unprecedented cyber-attack. Digital thermostats controlling thousands of freezers, fridges, and chiller cabinets across hundreds of stores were remotely overridden, pushing temperatures from a frigid -27C to over 50C. Over four to six hours, food designed to be frozen first defrosted, then slowly began to cook, culminating in a "catastrophe" that left a "mountain of waste" and stores grappling with spoiled inventory.
Shop staff arriving early the next morning reported blasts of hot air, akin to opening an oven. One Normandy supermarket even saw freezers pushed to an astonishing 80C, with extreme temperature rises sparking fires, triggering sprinklers, and causing water damage in certain stores. The Intermarché supermarket in Issy-les-Moulineaux, for instance, had its freezers pushed to 62C, resulting in everything being thrown away. Staff worked until almost midnight on Monday to reorder and restock shelves, clearing out the entire freezer contents.
What initially appeared to be isolated failures soon revealed itself as a coordinated assault, impacting up to 700 stores. Major chains like Intermarché, Coopérative U, Carrefour, Leclerc, and Monoprix, alongside smaller independent shops, were all victimized. Dominique Schelcher, president of Coopérative U, described it as a "completely unprecedented, unexpected, and extremely serious attack," confirming that 80 of his 2,000 supermarkets were targeted. This incident prompted the Paris public prosecutor’s office to open an immediate investigation, highlighting the escalating frequency of such events in what has been termed Europe’s "most hacked country."
Beyond the immediate financial and logistical nightmare of disposing of tons of spoiled food, this incident carries significant analytical weight. Gérôme Billois, a partner at Wavestone, a cybersecurity and technology company, noted the hallmarks of political sabotage. He outlined two feasible scenarios: either the work of "youngsters or activists who wanted to blow up a few freezers to prove what they could do," or a "destabilising attack" by internal or external state actors. Billois leaned towards the latter, suggesting it was designed "to convey the message to populations that they are not safe, to convey the impression that the government is falling apart, and ultimately to instil fear." He explicitly named "Iran and Russia" as two international actors known for executing such destabilisation tactics.
The implications are stark. This isn't merely about food spoilage; it's about the vulnerability of foundational infrastructure to sophisticated digital warfare. The ease with which remote temperature settings were overridden, leading to widespread chaos and destruction across major retail networks, signals a dangerous escalation in cyber warfare tactics. It demonstrates how everyday consumer services, often overlooked in national security debates, can become prime targets for disruption, impacting public confidence and economic stability directly. The fact that France is already grappling with the title of Europe's "most hacked country" only underscores the critical need for robust, proactive cybersecurity measures across all sectors, particularly those that form the bedrock of public convenience and supply chains.