Key facts
- Hackers exploited a software flaw in refrigeration systems, identified by Claroty, which had been fixed in 2025.
- The attack occurred amid existing pressures on Europe's food security from geopolitical insecurity and climate change.
- Experts believe traditional cyber methods, not advanced AI, were likely used in the supermarket attacks.
- The incident has prompted discussions about the security of other temperature-controlled sectors, such as vaccine storage.
- The EU has passed laws to improve cybersecurity in critical industries, but implementation lags in some member states.
A cyberattack that targeted hundreds of French supermarket refrigerators last week, causing significant food spoilage, has underscored the vulnerabilities in essential supply chains. While initially sparking fears of advanced AI-driven threats, experts suggest the attack likely employed traditional cybersecurity methods to exploit devices unnecessarily connected to the internet. The incident, which forced retailers like Intermarché and Carrefour to discard perishable goods, prompted high-level government response in France and EU-wide discussions on safeguarding critical infrastructure. Similar, though less impactful, cyber incidents were reported in the Netherlands and Belgium the same week. Cybersecurity experts noted that the exploited flaw in refrigeration systems had been identified and fixed by manufacturers in 2025, highlighting ongoing challenges with securing operational technology. The attacks come at a time of heightened pressure on Europe's food security due to geopolitical instability and climate change, with disruptions in the Strait of Hormuz and the Black Sea already impacting prices and supply. While the perpetrators' motives remain unknown, the incident has been framed as a potential act of cyber-enabled sabotage, with concerns raised about the security of other temperature-sensitive sectors like vaccine storage. Digital security firms are also leveraging AI for defense, but experts emphasize the need to prioritize fundamental cybersecurity practices.