网络攻击致欧洲数百家超市冷柜升温损毁生鲜食品Cyberattack Strikes European Supermarket Refrigeration Systems, Spoiling Food

调查显示，攻击者在夜间潜入网络，远程篡改了冷藏与冷冻设备的中央温度控制参数。受害门店的冷藏陈列柜未维持法定低温，反而持续发热，多处监测仪表记录到的温度迅速升至50摄氏度（约122华氏度）。有门店甚至监测到高达80摄氏度的极端高温，使得本应储存肉类、乳制品及速冻果蔬的货架转变为发热源。

Technical findings reveal that intruders remotely manipulated central temperature parameters within refrigeration units overnight. Rather than maintaining preservation cold, affected commercial display cases heated up, with sensors across stores recording temperatures climbing to 50 degrees Celsius (122 degrees Fahrenheit). In certain locations, readings reached as high as 80 degrees Celsius, turning refrigeration units holding meat, dairy, and frozen produce into active heat sources.

持续的异常高温造成内部硬件受损，直接销毁了陈列的大量生鲜与速冻商品，迫使店员将受影响货物全数撤架废弃。部分门店反映过热设备散发出浓烟，另有现场记录到起火事件。涉事零售商证实，服务商管理系统遭到入侵导致冷藏设施瘫痪，店内工作人员需在消防风险下清理变质食品并关闭失控的制冷线路。

The extreme heat melted internal equipment and destroyed stocked fresh goods, forcing workers to remove and dispose of large volumes of spoiled food to protect consumer health. In several stores, the overheating prompted smoke emissions, and isolated fires were reported. Retailers confirmed that an intrusion targeting third-party refrigeration management providers disabled temperature controls, leaving staff to confront fire hazards while shutting down compromised equipment.

此次遭受侵袭的商户名单涵盖了法国主要零售巨头，除家乐福与Monoprix之外，还包括Coopérative U以及E.Leclerc。Coopérative U首席执行官Dominique Schelcher证实，多家门店的冷藏生产设施均受到恶意软件波及。拥有Intermarché和Netto等品牌的Les Mousquetaires集团则成为了受创最重的零售商之一，其统计显示约有180至300家门店出现冷冻与冷藏陈列柜停摆。

The disruption spans leading French retail brands, including Carrefour, Monoprix, Coopérative U, and E.Leclerc. Coopérative U chief executive Dominique Schelcher confirmed that refrigeration production facilities across multiple stores were compromised by the incident. Les Mousquetaires, the parent company operating the Intermarché and Netto chains, emerged as one of the most heavily affected operators, with estimates ranging between 180 and 300 stores experiencing offline refrigerated displays and damaged cooling infrastructure.

Les Mousquetaires集团透露，针对冷藏维保第三方服务商的网络入侵直接造成了数百万欧元的经济损失。为了保障消费者安全，旗下各门店正在全面清点并销毁报废商品，目前正等待法院执达员与保险专家的勘验结果以确定最终定损数额。尽管各品牌尚未全部公开具体单店损失，但生鲜产品报废与设备检修成本叠加，已构成欧洲零售业近年来罕见的大规模供应链财产损失。

Les Mousquetaires stated that the breach targeting a technical maintenance contractor managing in-store cooling systems will result in several million euros in financial losses. Store teams have moved to identify and discard all spoiled items to protect consumer health, while company officials await comprehensive findings from court-appointed bailiffs and insurance assessors to determine the exact total cost. While not all retailers have published final store tallies, the combination of discarded perishables and physical hardware damage represents a substantial financial hit to the European retail sector.

技术层面的调查显示，此次恶意攻击的突破口源自一套广泛应用的丹麦制冷管理软件系统。根据相关报告，该系统部署于至少380家超市，但由于属于停止接收官方安全更新的过时版本，长期缺乏防护补丁，从而为远程未授权渗透提供了可乘之机。黑客通过该软件漏洞获取了对制冷机组的远程控制权，致使多处商户的温度设定被恶意改写。

Technical findings indicate that the intrusion compromised a widely deployed Danish software system used to manage commercial cooling. Reports identify that the affected platform was operating in at least 380 supermarkets, with the targeted installations consisting of outdated versions that no longer received vital security updates. This lack of active patch maintenance left vulnerable access points that allowed unknown actors to infiltrate the network remotely and manipulate temperature configurations across hundreds of commercial refrigeration and freezer units.

网络威胁情报机构Sekoia的威胁情报分析师Felix Aime指出，该事件的影响并不局限于法国本土，还蔓延至西班牙、葡萄牙、波兰、德国和比利时等欧洲多国。此外，拥有荷兰超市连锁Albert Heijn的跨国零售商阿霍德德尔海兹集团（Ahold Delhaize）也报告遭遇网络安全问题并切断了相关系统网络，显示出该技术风险对欧洲多国零售冷链设施构成了大范围挑战。

The disruption quickly expanded beyond French borders to impact multiple countries across Europe. Felix Aime, a senior cyberthreat intelligence analyst at threat detection firm Sekoia, stated that the operation reached stores in Spain, Portugal, Poland, Germany, and Belgium. Alongside these developments, Dutch retail giant Ahold Delhaize—the parent organization of supermarket operator Albert Heijn—reported encountering a network security issue and took technical systems offline, demonstrating the widespread regional reach of the vulnerabilities threatening refrigeration infrastructure.

针对这起侵袭法国及欧洲零售业的恶意事件，欧盟农业和食品专员Christophe Hansen在社交平台X上发文，对Intermarché、Coopérative U和E.Leclerc等零售机构遭受的袭击表达了强烈谴责。他指出，由于食品供应链面临被武器化的现实威胁，各个层级都需要对食品安全问题投入更多重视。Coopérative U首席执行官Dominique Schelcher同样通过声明表达了抗议，指责针对法国民众保鲜设备与日常食品供给的基础设施攻击极其恶劣且史无前例，属于不可接受的行径。

EU Commissioner for Agriculture and Food Christophe Hansen issued a public rebuke following the disruptions, condemning the cyberattack targeting food products across major supermarket operators including Intermarché, Coopérative U, and E.Leclerc. Writing on social media platform X, Hansen warned that food security demands heightened scrutiny at all levels because the weaponization of food supplies has turned into an active reality. Dominique Schelcher, chief executive officer of Coopérative U, likewise called the breach unacceptable on LinkedIn, emphasizing that striking equipment essential to preserving fresh produce and securing the French public's daily food supply represents an unprecedented threat to vital infrastructure.

为确保消费者的食品卫生与人身健康，受波及超市迅速启动了下架与报废受污染生鲜产品的应急程序，防止升温变质的食品流入市场。与此同时，法国司法与监管当局已经正式立案并启动调查程序，指派专门技术力量追踪实施远程篡改与恶意代码植入的责任人。各零售机构目前保持与调查人员的对接，协助勘验取证以查清袭击者的确切来源与作案手法。

Retailers moved quickly to implement emergency containment measures, directing supermarket staff to withdraw and discard all potentially compromised items from sales floors to safeguard public health and ensure consumer safety. At the same time, French judicial and regulatory authorities initiated an official investigation to identify the perpetrators behind the remote temperature manipulation and system breaches. Supermarket operators continue to cooperate with investigators and technical experts to preserve evidence, establish digital forensics, and trace the origin of the coordinated attack across the commercial food network.