Refrigeration attacks in French supermarkets: what third-party risk missed

TL;DR: Cyberattacks disrupted refrigeration systems across hundreds of French supermarkets in France, with attackers manipulating connected Danfoss controllers, temperatures rising to 50 degrees Celsius and consequences including spoiled stock and operational disruption, according to Panorays. Third-party risk becomes operational risk when internet-exposed supplier technology can break physical processes that businesses do not directly control.

Editorial analysis by NHI Mgmt Group, based on content published by Panorays: “The French Supermarket Cyberattack: Third-Party Risk in the Freezer Aisle”.

Key questions

Q: What breaks when OT devices are exposed to the internet?

A: Internet exposure turns HMIs and PLCs into reachable control points rather than protected field assets.

Q: Why do outdated firmware and legacy controllers increase third-party cyber risk?

A: Outdated firmware keeps known weaknesses alive after the vendor has stopped normal update support, so the buyer inherits a permanent exposure window.

Q: What signs suggest a supplier dependency can turn into an operational outage?

A: Watch for internet-reachable management interfaces, remote access that bypasses normal identity controls, unsupported firmware, and a lack of clear ownership for device updates.

Practitioner guidance

• Map critical supplier dependencies to physical business processes Document which suppliers, devices, and remote services keep each store, site, or production line operating, then rate them by operational blast radius rather than by security questionnaire score alone.
• Remove unnecessary internet exposure from OT management interfaces Identify refrigeration, building management, and other controller interfaces that can be reached externally, then restrict access to private networks or tightly controlled gateways.
• Track firmware support status as a procurement control Require evidence of active firmware support, update cadence, and end-of-life timelines before approving or renewing connected equipment used in critical operations.

Bottom line: This incident shows how supplier-managed technology can disrupt physical operations even when internal business systems are not breached.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →