Here’s a cyber attack with a difference. Overnight into Monday, hackers broke into the refrigeration systems of hundreds of French supermarkets — around 150 Intermarché stores, plus Super U and some E.Leclerc — and simply turned up the heat. Fridges and freezers that should sit below freezing were driven to 50°C for roughly six hours. Staff opening freezers on Monday morning were hit by waves of hot air. Millions of euros of meat, frozen food and vegetables went straight in the bin, and French prosecutors say the attack even caused fires. The government has ordered its national cyber agency to investigate, and one supermarket boss called it “extremely serious and unprecedented.”

Now take a moment to sit with that. No data was stolen. No ransomware. No spreadsheet full of customer records. The target wasn’t a server or a laptop — it was a fridge. And that is exactly why this story should matter to every business, school and hospital reading it.

We’ve been looking in the wrong place

When we think about cyber security, we picture the obvious things: servers, laptops, PCs, email — the kit that holds our data. We lock those down and feel protected. The French fridges are a wake-up call that anything connected to the internet can be attacked, whether or not it holds a single byte of data.

And a staggering amount of your building is now connected. This is the Internet of Things — “IoT” — and it’s already live and running in your organisation, usually without anyone thinking of it as “IT” at all. Heating and air-con. Lighting. Door-access systems. Alarms. CCTV. Electronic locks. Fridges and freezers. Building management systems. Even the smart speaker someone brought in from home.

Picture it in your world

Stop and ask: what in your business is quietly plugged into the network?

Take a school. If your door-access system were taken over, who gets in — and who gets locked out? That isn’t a data problem, it’s a safeguarding problem. Switch the heating off in the depths of winter and you risk burst pipes and closed classrooms; crank it the other way and you’ve a different problem entirely. Kill the lights, trip the alarms, pop the locks — none of it touches your data, and all of it causes real-world chaos.

Now raise the stakes. In a hospital, think about connected building systems and medical equipment: when the target is physical and people’s safety is involved, “commercial loss” becomes something far more serious. The French supermarkets got away with spoiled stock and a few fires. Not every organisation would be so lucky.

The uncomfortable detail

Here’s the part that should make everyone sit up: this wasn’t science fiction or some genius zero-day. The refrigeration controllers involved were a widely used brand, and security researchers had flagged weaknesses in exactly those controllers months earlier — with a fix made available. The risk was known. It just wasn’t acted on. That’s the story of most breaches: not brilliant hackers, but connected kit nobody was patching, monitoring, or even keeping a list of.

Honestly, I’m surprised a shelf of French fridges is the first IoT attack to reach mainstream headlines. It won’t be the last.

What to actually do about it

You can’t protect what you don’t know you have. The starting point is simple: find everything on your network that isn’t a “computer,” work out what it could do if it were misused, make sure it’s patched and properly segmented from the rest of your network, and keep an eye on it. That includes the shadow IoT — the smart plug, the webcam, the Alexa a member of staff quietly connects to your Wi-Fi. Genuinely: when someone brings one in, get it checked before it goes on the network.

At Foresight, this is exactly what we do. We scan, check and monitor the connected devices across your organisation — not just the servers and laptops — and tell you plainly where you’re exposed and what to fix. It’s a small fee for a lot of reassurance, and a great deal cheaper than a freezer aisle of spoiled stock, a flooded building or a fire. A free external risk scan or a look at your wider cyber security is a sensible first step.

The French fridges are funny right up until it’s your door locks, your heating or your hospital. IoT security isn’t tomorrow’s problem — it’s running in your building right now.

Sources: Reuters, Bloomberg, AFP, Sky News and others, 12 October 2026, reporting the cyber attack on French supermarket refrigeration systems; and August 2026 security research flagging vulnerabilities in the refrigeration controllers involved. This article is general cyber-security commentary and the author’s opinion.