A recent cyber attack on hundreds of French supermarkets exposed vulnerabilities in the food supply chain by remotely disabling refrigeration systems, causing significant spoilage and operational disruption. Around 150 Intermarché stores experienced temperatures in their fridges and freezers rising to 50 degrees Celsius for approximately six hours overnight, resulting in tonnage of wasted food, reported fires, and temporary closures of chilled aisles. Losses from the incident are estimated in the millions of euros.
Investigations suggest the attack targeted refrigeration software provided by Danish manufacturer Danfoss. The company stated that the affected supermarkets were operating on outdated software versions that were unable to resist the identified cyber threats. Danfoss noted that it had long recommended businesses update their systems to mitigate such risks. The incident highlights the dangers of relying on remote monitoring technologies without adequate cybersecurity measures.
While this event unfolded in France, it underscores broader concerns about the digitization of food supply networks worldwide. Modern food systems depend heavily on interconnected computer systems that manage tasks ranging from irrigation and crop monitoring on farms to production scheduling, storage, and logistics. Supermarkets leverage software to forecast demand, manage stock levels, and streamline pricing strategies, making resilience against cyber threats critical.
Cases in the United Kingdom illustrate the impact such disruptions can have. In November 2024, Morrisons experienced a ransomware attack targeting supply chain software company Blue Yonder, which supported the supermarket’s inventory forecasting and replenishment. The breach forced staff to revert to manual processes, leading to product shortages and increased waste due to difficulties in maintaining stock accuracy.
Similarly, Marks & Spencer faced a cyber attack in April 2025 that partially disabled its systems. Although stores remained open, the shift to manual stock handling heightened markdowns and food waste, particularly affecting the firm's ready-meal offerings. Co-op also encountered a cyber breach around the same time, resulting in widespread product shortages, payment system failures, and compromised customer data. The disruption notably affected remote locations, with reports of empty shelves on the Isle of Skye signaling the vulnerability of isolated communities to supply interruptions.
Supply chain disruptions can originate well before food reaches retail outlets. In 2023, Americold, a major refrigerated warehousing company servicing clients such as Walmart, Nestle, and McCain, was forced to shut down numerous facilities after a cyber attack. This rendered the company unable to process shipments, preventing supermarkets from receiving deliveries and demonstrating how interdependencies amplify risk.
The susceptibility extends beyond retail and logistics. Large food processors such as JBS, one of the world’s largest meat companies, have been targeted. A 2021 ransomware incident disrupted operations across North America and Australia, prompting the company to pay an $11 million ransom. Farms increasingly rely on digital systems for irrigation, condition monitoring, and automated feeding, meaning that cyber vulnerabilities at this stage could also have substantial consequences.
A 2024 government Food Security Report emphasized the growing threat posed by cyber attacks at every link in the food supply chain. This evolving landscape calls for heightened cybersecurity protocols to safeguard food availability and prevent costly damage and waste resulting from digital system failures.