Off-Nadir Delta

Hackers remotely trigger defrosting of refrigeration systems at hundreds of French supermarkets

Titles and summaries are AI-extracted from news reporting; every source is linked below. Event id 6d8f9ce6-4bd5-4e73-b262-d83398bdcaf4.

Where
Névezresolved to locality48.853, 2.348
When
Occurrence date not stated by reportingFirst reported 2026-10-12 · last update 2026-10-14
Sourcing
63 reports63 reports across 54 outlets · independence not established
How far this got
localizednamed facility unresolvedThis signal has no sensor recommendation, so there is nothing specific to look for.

Summary

Hackers remotely triggered the forced defrosting of refrigeration systems at hundreds of French supermarkets overnight, causing refrigeration units to heat up to 50°C and resulting in food spoilage and fires at several stores. Major chains affected included Intermarché (approximately 150-180 stores), Carrefour (80 stores), Monoprix (5% of its French stores), Coopérative U, E.Leclerc, and Netto. The attack exploited vulnerabilities in refrigeration-management software supplied by Danish company Danfoss, with many affected units running outdated firmware. Estimates of losses ranged from tens of millions of euros nationwide in a single day. The Paris prosecutor's office opened a cyber-crime investigation, and France's National Cybersecurity Agency (ANSSI) was instructed to investigate. Reports indicated the attack may have also affected supermarkets in Spain, Portugal, Poland, Germany, Belgium, and the Netherlands. Dutch retailer Ahold Delhaize reported a related security issue on its network. No group claimed responsibility for the attack.

What imagery could confirm

Which satellite to use, what to look for and why. Part of the event detail on Pro.

What remains unresolved

  • named facility unresolved

Timeline

81 recorded change(s). The ledger starts when this event was first folded: the initial observation is not recorded as a change, so an empty timeline means nothing has moved since, not that nothing is known.

    81 change(s) before the history shown here.

    Sources

    Grouped by outlet. Syndication is not collapsed, so several outlets can carry one wire story — the count is breadth of carriage, not independent confirmation.

    63 reports in all; the full list with the facts taken from each is part of the event detail on Pro.

    Related events

    1 related event(s) and 12 place(s) or facilities — the same facility, place, actor or campaign. Part of the event detail on Pro.

    Open the WatchfloorAsk Delta Agent

    Reproduce over the API (free endpoint)

    bash
    curl "https://offnadir-delta.com/api/v1/events/6d8f9ce6-4bd5-4e73-b262-d83398bdcaf4/thread" \
  -H "Authorization: Bearer ond_YOUR_API_KEY"

    For situational awareness only — not for tracking or targeting individuals. Every claim above links to its reporting; satellite fields are the same values the API serves.