An unidentified hacking group, or several of them, wrought havoc across hundreds of European supermarkets this week. The root cause of the fiasco wasn’t stolen customer data. It was temperature control access.
In an overnight cyberattack spanning Sunday (Oct. 11) and Monday (Oct. 12), attackers remotely manipulated refrigeration systems at French supermarket chains including Intermarché, Carrefour, Coopérative U and Monoprix, pushing temperatures as high as 122 degrees Fahrenheit, Reuters reported Monday.
Attackers extended defrost cycles from approximately one hour to eight hours, delaying alarms and increasing the damage before store employees could intervene, Le Monde reported Tuesday (Oct. 13).
The result was spoiled inventory, disrupted operations, damaged equipment and reports of fires, with Intermarché CEO Thierry Cotillard estimating that the unprecedented attack could generate tens of millions of euros in losses, per the Reuters report.
The attack followed an incident over the summer in the United States that involved refrigeration systems at military commissaries, which are the tax-free grocery stores for military personnel and their families located on bases, the report said.
As retailers, manufacturers and logistics companies connect more physical equipment to digital networks, cybersecurity failures threaten more than information and business continuity. They can destroy inventory, damage infrastructure, interrupt supply chains and create liabilities that persist after the compromised systems are restored. The accounting, insurance and governance frameworks used to manage those risks will need to follow.
See also: AI Gives Cybersecurity a Backlog CFOs and CISOs Can’t Patch Away
It’s Getting Easier for Software Vulnerabilities to Become Inventory Losses
Rather than disabling payment systems or encrypting corporate databases, attackers exploited vulnerable refrigeration controllers supplied by third-party manufacturers. The equipment allows technicians to monitor and adjust commercial refrigeration systems remotely, reducing maintenance costs and enabling centralized oversight. By changing how the equipment operated, hackers compromised the products it was designed to preserve.
For retailers operating on thin margins, refrigerated inventory represents a particularly vulnerable asset. Unlike stolen information, spoiled food cannot be recovered through backups. Once products exceed safe temperature thresholds, their commercial value can disappear entirely. That creates a different recovery equation. Restoring the controller may take hours. Replacing inventory, inspecting equipment, documenting losses and rebuilding supply availability can take longer.
The incident also demonstrates how a common technology supplier can create correlated operational risks across otherwise independent businesses. Supermarket chains compete on pricing, distribution and customer experience, yet many depend on overlapping networks of equipment manufacturers, software vendors and maintenance contractors.
The PYMNTS Intelligence report “Vendors and Vulnerabilities: The Cyberattack Squeeze on Mid-Market Firms” found in August 2025 that hackers are going after middle-market firms, which depend on third-party cloud providers, software-as-a-service platforms, managed service and logistics providers, which can leave them vulnerable to attack.
We’d love to be your preferred source for news.
Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!
A vulnerability affecting one technology provider can create financial exposure for customers who never directly purchased or maintained the compromised software.
Read also: OFAC Warns Sanctions Risk Can Hide Deep in the Payment Chain
Operational Resilience Is the Next Cybersecurity Frontier
The French supermarket attacks demonstrate that fraudsters need not steal information or demand ransom to inflict economic damage. They can instead manipulate ordinary operating instructions until a company’s physical assets become unusable.
The implications of the attack and its exposed vulnerabilities extend beyond grocery retail. Pharmaceutical distributors depend on temperature-controlled storage. Manufacturers rely on digitally managed production lines. Warehouses use automated handling equipment. Hospitals operate connected medical and environmental systems.
Across these industries, digital access increasingly carries the authority to change physical conditions.
Preventing unauthorized access remains essential. But so does limiting what a compromised system can physically do, how quickly abnormal behavior is detected and whether operations can continue without the affected technology.
Technologies like artificial intelligence are only democratizing the ability of fraudsters to infiltrate critical security systems.
The PYMNTS Intelligence report “2025 State of Fraud and Financial Crime in the United States” found in December that 68% of financial institutions increased their fraud detection budgets year over year. That spending came as 46% of institutions reported increasingly sophisticated fraud schemes, up from 35% a year earlier.
The companies best positioned to manage this exposure will be those that treat connected infrastructure as both a productivity investment and a potential source of concentrated financial risk.
For all PYMNTS B2B coverage, subscribe to the daily B2B newsletter.
Add as Preferred Source
