Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack
Hundreds of Intermarché shops and Coopérative U outlets in France hit, with fears Dutch chains also affected
This page is Both News's AI analysis of the article, not the article itself. Read the full story on the publisher's site.
Read the original articleThe Guardian · theguardian.comOur verdict
Political lean
0 = center. The further from 0, the stronger the lean (max 10).
Reporting balance
How complete and even-handed the reporting is — separate from which side it leans.
This is a fairly neutral, professionally attributed breaking-news report: the prosecutor, government, retailers and Danfoss are quoted, and unconfirmed links are flagged. Its main weakness is that the headline and deck overstate the scale ('hundreds' of stores) beyond the one sourced figure (about 150 Intermarché stores), and that the Russia background could suggest an attribution that is not established. Readers should keep in mind that the attackers are unidentified and the scale is still unconfirmed.
- Why this lean
- The story has no left/right axis. Its framing, sourcing and wording are neutral. The only political reference, Macron's measures against Russian 'hybrid attacks', is background and not tied to this incident, so it does not add a partisan tilt.
- Framing
- Told as an urgent, multi-country infrastructure incident, with the central question being how far the attack reached and who is responsible.
Key Findings
- 1The article's central facts are well attributed. The prosecutor, the PM's office, the retailer and Danfoss are each named, and the article keeps 'it was not clear' language where links are unconfirmed (the Ahold Delhaize link).
- 2The strongest concrete detail is the temperature and duration: 'fridges heated up to 50C for six hours'. This is attributed to Les Mousquetaires, a single company, and not independently checked.
- 3The deck says 'Hundreds of Intermarché shops and Coopérative U outlets in France hit', but the body gives only one figure, about 150 Intermarché stores. The Coopérative U figure is missing, so the scale is overstated relative to the sourcing.
- 4The attack is described as coming from 'hackers', yet the article gives no detail on the attackers or any claim of responsibility. The Macron sentence about Russian 'hybrid attacks' sits next to the incident without saying that any link has been established, which could lead readers to infer an attribution.
- 5Danfoss's response is handled fairly: the article gives its statement in full, including its point that customers were advised to update, which places part of the responsibility on the operators.
- 6Several chains (Carrefour, Monoprix, Auchan, E Leclerc) did not respond. The article says so, which is good practice, though the E Leclerc claim rests on a secondhand BFM TV report.
Who gets a voice
- Paris prosecutor's officeOfficial statement describing the attack and its damageFrench judicial authoritiesMain voice
- Sébastien Lecornu (via an aide and an anonymous source)Prime minister who ordered ANSSI to investigateFrench governmentMain voice
- Les Mousquetaires spokespersonOwner of Intermarché, describing the affected stores and food disposalAffected retailer (Intermarché)Main voice
- Dominique SchelcherCEO of Coopérative U, speaking on XAffected retailer (Coopérative U)Main voice
- DanfossVendor whose software had the vulnerability, responding with a statementEquipment supplier, pointing to customer maintenanceMain voice
- Ahold DelhaizeDutch parent company, reporting a 'security issue' in its networkAffected Dutch and Belgian retailerMinor voice
- Emmanuel MacronFrench president, mentioned only as backgroundFrench government stance on Russian hybrid threatsMinor voice
- BFM TVMedia outlet cited on the E Leclerc attackFrench broadcast newsMinor voice
Loaded language
The word is attributed to officials, but it is repeated in the headline and is hard to verify without comparisons.
Vivid wording that suggests a wider threat than the article documents.
The deck gives a scale that the body does not support with figures.
Dimension Breakdown
Several institutions and companies are quoted, including prosecutors, the PM's office, the retailer, and the vendor Danfoss. However, key details come from anonymous officials ('a person in his office', 'a source close to Lecornu'), and no independent expert is heard.
Most claims are attributed and the wording is plain. 'Unprecedented' is attributed to officials. The deck's 'Hundreds of...' and the phrase 'potential havoc' add some emphasis.
The 50C temperature, six hours, and about 150 Intermarché stores are sourced. The 'several hundred stores' claim has no sourced breakdown, and the Coopérative U count is missing. Nothing is said about the scale of food losses or the number of fires.
The retailers that were hit, the prosecutor, the government and Danfoss are heard. Chains that did not respond are noted. No security expert, consumer group or food-safety body gives a view on the risk to consumers.
The headline's 'Hackers force French supermarket fridges to heat up to 50C' is supported by the body. However, the deck's 'Hundreds of' outlets exceeds the one firm figure in the body (about 150 Intermarché stores), and the headline states the attack as fact while attribution is still open.
The article gives the Danfoss firmware explanation and the broader European context. It does not explain how remote control of fridges works, does not say whether anyone has claimed responsibility, and invokes the Russia background without saying that no link to this attack has been established.
Missing Perspectives
- Independent cybersecurity experts who could explain how fridges are remotely controlled and how serious the risk is beyond this case.
- Food-safety or consumer authorities on whether customers face any risk and what the cost of the food losses is.
- Confirmation or denial from the chains that did not respond, or the Coopérative U figures, which would show the scale claimed in the deck.
- Any statement on whether an attacker or group has claimed responsibility, which matters for the headline's 'Hackers' framing.
Highlighted Passages
“Hundreds of Intermarché shops and Coopérative U outlets in France hit, with fears Dutch chains also affected”
“The French president, Emmanuel Macron, a strong supporter of Ukraine in its fight against the Russian invasion, last month ordered measures to protect France’s critical infrastructure from Russian “hybrid attacks”.”
“The incident comes against the background of growing concern over the potential havoc that can be caused in Europe in all sectors by cyber-attacks by malicious actors.”
Key Facts
- The Paris prosecutor's office said the large-scale attack was 'affecting connected refrigerators in several major food retailers across France', with 'food losses and fires' reported.
- Les Mousquetaires said about 150 Intermarché stores were hit, with fridges heated to 50C for six hours, and that all food was thrown away.
- PM Sébastien Lecornu instructed ANSSI to investigate, according to a person in his office.
- According to a source close to Lecornu, ANSSI identified a vulnerability in software supplied by Danish company Danfoss.
- Danfoss said the affected units 'were running outdated firmware' and that it had long advised customers to update.
- Ahold Delhaize reported a 'security issue' in its network and took several systems offline; the article says it is not clear whether this is linked to the French attack.