France’s Supermarket Cyberattack Is A Warning For NATO’s Food Security – OpEd
A cyberattack on 11–12 October manipulated Danfoss refrigeration controllers across hundreds of French supermarkets, spoiling fresh and frozen stock and triggering fires; CERT-FR confirmed the compromises but no perpetrator or AI involvement has been established.
Many affected systems ran outdated or unsupported firmware, illustrating how legacy operational technology can turn a software breach into immediate physical losses; independent temperature sensors and bounded remote-access privileges are needed so alarms cannot be silenced by the same controller that alters settings.
The incident underscores that food-supply chains are civil-defence infrastructure; governments and retailers should rehearse multi-site failures, measure recovery by verifiable food safety rather than restored screens, and treat cold-chain continuity as a NATO-relevant resilience issue.
Hundreds of disrupted refrigerators expose a neglected vulnerability in the civilian infrastructure that supports military readiness. The answer is verifiable local control, not speculation about rogue AI.
A cyberattack can destroy food without touching a warehouse door. Once a refrigeration system is pushed outside its safe operating limits, a later software recovery cannot put the spoiled inventory back on a supermarket shelf.
That is the lesson of the attack that swept through French supermarkets overnight on October 11–12. Reuters reported disruptions across major chains, spoiled fresh and frozen products, and fires at some premises. Defrost and temperature settings were reportedly manipulated as high as 50 degrees Celsius. That figure describes reported control settings and conditions in affected facilities, not the temperature reached by every item of food. The number of stores continued to change as retailers assessed the damage; what is already clear is that hundreds were affected.
France’s national incident-response authority CERT-FR confirmed numerous compromises involving Danfoss AK-SM and AK-SC refrigeration-management systems. Prosecutors opened an investigation. The public record does not yet establish the perpetrators, a definitive intrusion route, or any use of artificial intelligence. A multi-retailer cyberattack is not, without further evidence, proof of foreign-state direction or an AI-led campaign.
Its significance needs none of those embellishments. Food preservation has become a digitally controlled function, and the consequences of losing control are physical, immediate and costly.
A food-supply failure can begin with an old controller
Danfoss told the refrigeration trade publication Cooling Post that many affected installations relied on older products no longer........
