Observed Signal · Oct 12, 2026 · Security Incident · Source: Manager Magazin · Impact: 2/5 · Sentiment: Negative
Cyberattack disrupts cooling systems at French supermarket chains
A large-scale cyberattack on October 14, 2026, targeted smart refrigerators manufactured by Danfoss, affecting supermarket chains across France and the Netherlands. In France, around 350 stores, including Carrefour, Monoprix, Intermarché, Leclerc, and Coopérative U, were hit; in the Netherlands, Albert Heijn, Etos, and Gall & Gall were affected. Hackers activated the defrost mode, raising temperatures to 50°C, causing food spoilage and technical damage. French initial damages are estimated at €300,000, with total economic losses in the millions. The exploit leveraged vulnerabilities in Danfoss AK-SM 800A controllers, previously disclosed by Claroty; Danfoss released a firmware fix, noting many systems were outdated. Attacks are ongoing, and no group has claimed responsibility. Authorities in France and Europe are investigating. Separately, Ahold Delhaize reported a network security incident with no confirmed link.
The cyberattack on critical retail infrastructure (cooling systems) at major French supermarket chains highlights vulnerabilities in the retail supply chain and could impact the advertising and customer data strategies of these retailers.
Track Carrefour Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Cyberattack on October 14, 2026, hit refrigeration systems in ~350 French supermarkets (Carrefour, Monoprix, Intermarché, Leclerc, Coopérative U) and Dutch chains (Albert Heijn, Etos, Gall & Gall).
- Attackers activated defrost mode, raising temperatures to 50°C, causing food spoilage and technical damage.
- The exploit targeted Danfoss AK-SM 800A controllers, previously disclosed by Claroty; Danfoss released a firmware fix and cited outdated systems.
- Initial damages in France are estimated at €300,000, with broader economic losses in the millions.
- Attacks are ongoing; no group has claimed responsibility, and investigations are underway by French and European authorities; Ahold Delhaize reported a separate, unconfirmed incident.
Connected Companies & Entities
2 Entities mapped“The retailer Carrefour said the disruption mainly affected 80 of its 6,000 stores.”
“At almost the same time, the Dutch-Belgian retail group Ahold Delhaize confirmed a security incident in its network.”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Series of Cyberattacks Hits European Retailers
A wave of cyberattacks has affected several European retailers, highlighting growing risks in digitally connected supply chains. Reported incidents include logistics disruptions at Dutch department store De Bijenkorf after an attack on an external logistics partner; a data breach at French group Intermarché affecting about 300,000 Click-&-Collect users (names, emails and contact details exposed; payment data and passwords reportedly not affected); and a compromise at Polish convenience chain Żabka via a third-party service account, giving attackers access to internal systems while store operations and payment systems remained functional. The cases underscore an increase in supply-chain attacks that exploit third-party vendors to bypass core defenses, prompting calls for broader security strategies across retailers and their supplier ecosystems.
Cyberattack on De Bijenkorf Logistics Partner Disrupts Operations
A cyberattack on an external logistics partner has significantly disrupted operations at Dutch department store chain De Bijenkorf, which is part of the Selfridges Group. Online order fulfillment, returns and refunds have been delayed while stores, the webshop and the mobile app remain operational. Retail Detail reported that unauthorized actors accessed parts of the logistics provider's IT systems; De Bijenkorf has secured affected systems, engaged external cybersecurity and forensic experts, notified affected customers and reported the incident to the data protection authority. It remains unclear whether personal customer data was exfiltrated. The incident highlights growing supply‑chain cybersecurity risks for retailers and the need to include external partners in security strategies and contingency planning.
CEVA Cyberattack Disrupts De Bijenkorf Online Sales
A cyberincident at logistics provider CEVA Logistics is disrupting operations for multiple European retailers. De Bijenkorf says many items are unavailable online and deliveries delayed after a CEVA distribution centre in Tilburg—serving both its stores and e‑commerce—was affected; it has published a customer FAQ. Ace & Tate routed frame orders to in‑store pickup while continuing to ship contact lenses. About You is investigating possible unauthorized access to CEVA systems and has moved affected logistics processes to other sites. Media reports name marketplace Bol among CEVA customers, and some firms (including Valve) have notified customers about potential exposure of personal data. CEVA has indicated that customer names, addresses, phone numbers and order data may have been exposed; passwords and payment details are reportedly not believed to be leaked. Investigations are ongoing.
Receive all future signals for Carrefour & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.