The Great Freezer Meltdown Exposes France's Digital Vulnerability

When supermarket staff across France walked into work early on Monday morning, they expected the crisp draft of cold aisles. Instead, they were greeted by blasts of hot air akin to opening a preheated oven. Overnight, an unprecedented cyberattack tampered with the digital thermostats of thousands of commercial freezers, turning cold storage units from freezing temperatures to over 50 degrees Celsius—and in extreme cases, 80 degrees.

The fallout from this digital melting spree is staggering. Around 700 stores, ranging from retail giants like Carrefour, Intermarché, and Coopérative U to local independent grocers, saw their inventory thoroughly cooked and ruined. Tons of spoiled frozen goods had to be hauled off to landfills. In several locations, the heat generated by jammed systems triggered fire sprinklers, adding water damage to the financial carnage. Estimates from industry executives put the total damage in the tens of millions of euros, with insurance companies expectedly hesitant to foot the bill for such glaring security lapses.

How did hackers manage to paralyze a nation's fresh supply chain without setting foot in a store? The answer lies in the embarrassingly sloppy state of modern corporate infrastructure. The attackers exploited internet-connected temperature controllers, primarily units manufactured by Danish group Danfoss. Many of these devices were running on obsolete firmware that manufacturers had flagged for replacement years ago. Worse still, basic security hygiene was conspicuously absent: numerous units were still operating on default factory passwords, allowing intruders to disable internal alarms before cranking up the heat.

Predictably, the response from retail leadership was a lesson in responsibility avoidance. Dominique Schelcher, head of Coopérative U, was quick to point fingers at external refrigeration subcontractors on national radio, washing his hands of direct accountability. Yet this corporate deflection reflects a broader systemic culture in France, which now holds the dubious distinction of being Europe’s most hacked nation by volume of compromised records. From national health systems and employment agencies to the Ministry of Economy—where the tax records of nearly 700,000 citizens were exposed earlier this year—the state's digital perimeter resembles a sieve.

While cyber experts like Gérôme Billois speculate whether the incident was the work of opportunistic activists or destabilization attempts by state actors such as Iran or Russia, the root vulnerability remains self-inflicted. Meanwhile, the European Union’s proposed Cyber Resilience Act, intended to mandate baseline security for connected devices, remains bogged down in Brussels’ bureaucratic machinery, delayed by endless quibbling over amendments and legislative priority lists.

When commercial enterprises leave critical infrastructure connected to the open web with default passwords, they hardly need sophisticated foreign adversaries to engineer a crisis. The Great French Freezer Meltdown is less a testament to elite hacking than an indictment of institutional incompetence.

Written by Freya Stensrud freya.stensrud@alpineweekly.com