OMITTED

What the news leaves out.

← Omitted front page

Cyberattack Disrupts French Supermarket Refrigeration Systems

6 sources · updated 2026-10-15
Left 50% Center 0% Right 50%
3 left · 0 center · 3 right

What happened

Reuters first reported on October 13, 2026 that a cyberattack had caused refrigerators and freezers at hundreds of French supermarkets to overheat overnight, spoiling food. CNBC credited Reuters as the origin; Coopérative U CEO Dominique Schelcher and European Commissioner for Agriculture and Food Christophe Hansen were the first on-record sources, as quoted by CNBC that day. The attack targeted remote-management software from Danish manufacturer Danfoss at chains including Carrefour, Monoprix, Intermarché, Coopérative U and others, forcing units into prolonged defrost cycles that reached as much as 50 degrees Celsius (122 Fahrenheit); similar disruptions were reported in Spain, Portugal, Poland, Germany, Belgium and the Netherlands. French prosecutors opened an investigation into what they called a large-scale attack; Danfoss said almost all affected units were legacy products that no longer receive software or security updates, and France's National Cybersecurity Agency (ANSSI) identified a vulnerability in Danfoss software. Les Mousquetaires, owner of Intermarché, said about 180 of its stores were hit and that overheating produced smoke in some locations but that no fires had been reported, while other accounts cited small fires; no group had claimed responsibility or made a ransom demand.
Sourcing check · Mostly on the record · 6 articles

4 of 5 articles cite a named source for the story. It was on the record from the first report.

What these terms mean and how they're counted
On the record · names a source 4 of 5
On the record means the article cites a source by name for the story's main claim: a person, or an institution speaking officially, such as a company statement or a named agency's spokesperson. The opposite is an unnamed source. The count is how many of the counted articles cite at least one such source; the names are everyone named across them, each once however the articles spell it. Here: Dominique Schelcher, Christophe Hansen, Felix Aime, ANSSI, Carrefour and Paris prosecutor’s office
Primary evidence · cites a document or data 0 of 5
Primary evidence means the article cites a record you could check yourself: a court filing or ruling, a dataset or report, a recording or transcript, an official statement or press release, market data. A quote is not a document. The count is how many articles cite one. Here: None cited.
Credits another outlet 0 of 5
The article says the story comes from another outlet's reporting (“first reported by Reuters”). Those articles relay the story; they are not independent confirmation. Here: Each article presents its own reporting.
Unnamed sources 3 of 5
The main claim is attributed to people who are not identified: “people familiar with the matter”, “officials said”. The count is how many articles do this. Here: e.g. “a person in his office said”, “Felix Aime, a senior cyberthreat intelligence analyst at Sekoia”
How it developed
When the first report landed and whether it named anyone; when the first named source and the first document appeared. Here: First report Oct 12, 22:56 UTC by New York Post, naming its source.
Not counted 1
Opinion, analysis and video pieces, and articles too short to assess. Every count above is out of the counted articles. An article republished under a new headline is one article.
This is about who is cited, not whether the story is true. Each source below says what it names. How we count
Omitted — what each side leaves out

Unpacked

Left-leaning coverage presents the fridge attack as an unprecedented strike on France's food supply and never tells readers the hit units were unsupported controllers the manufacturer had already told retailers to replace. Right-leaning coverage, in the Daily Wire, reports that Danfoss said almost all affected systems were "legacy" products that no longer receive security updates, and that France's cybersecurity agency found a vulnerability in that software. CNBC instead points to a refrigeration service provider and a warning about food as a weapon, so the cause reads as a novel assault rather than unpatched industrial kit. Right-leaning Daily Wire told readers hackers set grocery stores "Ablaze". Left-leaning CNBC quotes a supermarket group saying the overheating produced smoke but no fires have been reported. Did the overheated cabinets still run the unsupported firmware Danfoss says it had long told French chains to replace?
Bottom line

You can read CNBC on the supermarket fridge hack and never hear the name Danfoss. The Daily Wire is where that vendor says the overheated boxes were "legacy" products that no longer receive security updates.

The receipts — 6 facts one side's coverage lacks
  • Danfoss said almost all affected units were legacy products that no longer receive software or security updates official statementin Daily Wire · absent from left-leaning coverage
  • France's National Cybersecurity Agency identified a vulnerability in Danfoss software official statementin Daily Wire, Breitbart · absent from left-leaning coverage
  • In August, Claroty published research on Danfoss controller flaws that could bypass login protections, and said Danfoss issued a firmware update contextin Daily Wire · absent from left-leaning coverage
  • Hackers forced refrigeration units to remain in defrost mode for several hours rather than a short normal cycle contextin Daily Wire, Breitbart · absent from left-leaning coverage
  • Les Mousquetaires said overheating produced smoke but no fires have been reported official statementin CNBC · absent from right-leaning coverage
  • The attack also disrupted deliveries and in-store pricing through electronic shelf labels contextin Breitbart · absent from left-leaning coverage
The Left View
Left-leaning coverage treated the incident as an unprecedented strike on the food supply and a warning that food can be weaponized through cyber means. Schelcher called attacking equipment "essential to the preservation of fresh products and the food supply of the French people" "extremely serious and unprecedented" and "unacceptable," and Hansen said, "Food security requires more attention at all levels. Because the weaponization of food has become a reality." CNBC placed the episode in a broader wave of cyberattacks that experts warn artificial intelligence is making faster and larger, quoting Interpol's Bjorn R. Watne that AI can target multiple victims at once — "It's an evolution and not a revolution." NBC stressed that investigators were still tracking a spreading attack and that "many are worried about how vulnerable these systems could be in any country." The New York Times underscored that the attackers have not been identified.
The Right View
Right-leaning coverage presented the incident as remote sabotage of physical store infrastructure, with the Daily Wire headlining that hackers "Set Grocery Stores Ablaze With Remote Freezer Attacks" and citing BBC reports of small fires. They emphasized Danfoss's statement that affected units "were running outdated firmware" and that the company had "long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems," and the Daily Wire noted August research by Claroty describing vulnerabilities that could let attackers bypass login protections on Danfoss controllers — flaws Danfoss said it addressed in a firmware update, though neither French authorities nor the company had linked those flaws to this attack. Breitbart said the hack "may prove to be" infrastructure sabotage, invoking a September train derailment in France that authorities treated as suspected sabotage, and observed that no one had claimed credit or made a ransom demand. Both outlets also argued that AI is lowering the barrier to such operations, with the Daily Wire citing Anthropic's claim of "the first documented case of a large-scale cyberattack executed without substantial human intervention."
Our Take (balanced)
The left's strongest argument is that hitting refrigeration is an attack on food security itself: Schelcher's language about the "food supply of the French people" and Hansen's claim that "the weaponization of food has become a reality" rest on disruption of systems that keep fresh and frozen food safe, and on NBC's point that the same class of controllers exists in other countries. The right's strongest argument is that the breach ran on equipment Danfoss itself called legacy and unsupported, after public research had already described login-bypass flaws and after the vendor had urged customers to upgrade — evidence that this was at least as much a failure to retire insecure industrial controllers as a novel food-war campaign, especially given the absence of a claim of responsibility or a ransom demand. The central unresolved tension is whether the incident is primarily evidence that food supply chains can be weaponized through cyber means, as Hansen argued, or primarily evidence that retailers left end-of-life refrigeration controllers in place after their vendor had warned they were unsupported — a tension the unidentified attackers, and disagreement over whether overheating produced fires, leave open.

6 sources

More stories

The week's bottom lines, in your inbox

One email a week: the five stories that mattered and what they actually mean. Free.