Coopérative U confirms a cyber-attack on refrigeration at several of its supermarkets

In the post as quoted, Schelcher did not mention Danfoss. He said: "Our teams are fully mobilized, in coordination with refrigeration specialists, to restore the situation as quickly as possible. An investigation will be needed to shed full light on this attack." ^[5]

The Danfoss link is BFMTV's, relayed by Infosecurity Magazine, which said it had contacted Coopérative U, E. Leclerc, Intermarché and Danfoss for comment and called the story developing. ^[6]

Danfoss has a vulnerability history. Infosecurity Magazine lists CVE-2023-25915, CVE-2025-41450, CVE-2025-41451 and CVE-2025-41452 as past critical flaws in its products, some of which could let attackers gain privileged access to refrigeration control systems and manipulate physical equipment. ^[2] Separately, at DEF CON 34 in August 2026, Claroty's Team82 demonstrated that an attacker in control of an AK-SM 800A controller could switch off cooling and report false temperatures, so that cold-chain failures might go unseen. ^[3] The report links none of these CVEs, or that model, to this incident, and it does not identify the attackers or their route in.

Haguenau is a sample of two stores. ^[9] BFMTV assessed 150 Intermarché stores as affected ^[10], and with Le Borgne's list the reports name five retail brands. ^[12] Scaling the Haguenau loss to 150 stores would be a guess.

On this record it is one incident. In our view the supplier claim is the first thing to test, because the software version and the defrost setting both come from the same BFMTV account. ^{[7] [8]}