French supermarket cyberattack turns cold stock into a loss

The bill from a cyberattack on French supermarket refrigeration is already reaching the food itself. Intermarché said it had thrown away all affected food to avoid health risks, the BBC reported on October 12, citing Reuters. [3]

Restoring a temperature setting does not recover discarded products. For a grocer, that creates two recovery jobs: restore refrigeration, then rebuild saleable stock. Potential costs include replacement goods and replenishment work, alongside technical repair. Sales could also be lost while products are unavailable. A system returning online would therefore be an incomplete measure of business recovery.

Coopérative U chief executive Dominique Schelcher directly confirmed that an overnight cyberattack was affecting refrigeration installations at several stores in its network. In his October 12 statement, he said staff were working with refrigeration specialists to restore the situation as quickly as possible. That statement confirms an incident and an active recovery effort, not completed restoration. [2] [3]

By Monday afternoon, October 12, recovery was still unfinished. Mousquetaires Group told the BBC that some fresh and frozen food display units remained out of service. Staff were working to restock shelves “as soon as possible”. That is an active recovery effort, not confirmation that all stores were operating normally. [3]

The BBC also cited BFMTV’s report that two supermarkets in Alsace reported combined losses of €270,000. That is a local loss report, not a verified national total. [3]

The BBC says the full scale of the attack remains unclear. Its account does not supply a verified nationwide loss figure. [3]

The BBC reports that the attack targeted software provided by Danfoss. It also reports Danfoss’s explanation: the affected cold units were older models whose security software could not be updated to ward off a risk the company had identified. [3]

That account narrows the reported equipment issue; it does not independently verify the full technical path into each system or identify the attacker. If investigation confirms a weakness shared across sites, other retailers would need to assess exposure. Naming a supplier is a starting point for that work, not proof every installation is vulnerable.

A useful eventual damage account would separate discarded inventory, repair and replenishment expenses, and lost sales. Lost revenue is not itself the same as lost profit. Nor should the two-store loss be multiplied across France without knowing the stock exposed at each site. Consistent definitions matter to an eventual total.

Replacement orders could shift work to suppliers and delivery teams, while gaps on shelves could send shoppers elsewhere. These are plausible follow-on effects, not observed outcomes. Their importance would depend on the products affected, alternative stock and the length of the interruption.

The strongest counterpoint is that an alarming, widespread incident need not produce prolonged disruption or losses on the scale initially feared. If refrigeration is restored quickly and most stock remains saleable, the aggregate damage could be smaller. The two-store report alone cannot settle that question.

Watch for retailer disclosures of discarded-stock write-offs, confirmed affected-store counts, and the time between restoring refrigeration and replenishing shelves. Small write-offs and a rapid return to normal availability would weaken the case for lasting economic damage; repeated spoilage or lengthy restocking would strengthen it.