Cyberattack Disrupts Food Supplies at Major French Supermarkets

French grocery retailers have been forced to confront a significant cyber intrusion that began on Oct. 11, according to the chief executive of the Cooperative U network. The attack targeted the digital systems that manage inventory and ordering, causing immediate interruptions to food stock in a number of stores across the country.

Cooperative U confirmed that the breach affected the software responsible for tracking product levels on shelves, leading to abrupt gaps in the availability of everyday items such as dairy, fresh produce, and packaged staples. While the problem appears confined to a subset of outlets, the company warned that the situation could spread if the malicious code is not fully neutralised.

The incident arrives amid a broader wave of cyber threats aimed at the retail sector, where ransomware and data‑theft operations have increasingly focused on point‑of‑sale and supply‑chain platforms. French authorities have repeatedly highlighted the vulnerability of essential commerce infrastructure, noting that disruptions of this kind can ripple through the economy and erode consumer trust.

Shoppers at the affected stores reported empty shelves and longer checkout times as staff resorted to manual stock checks. The shortage of basic groceries has heightened concerns about food security, particularly as inflation pressures already strain household budgets. Some locations have introduced temporary rationing measures to ensure equitable distribution of limited items.

In response, Cooperative U has enlisted external cybersecurity experts to isolate the breach, restore compromised systems, and conduct a forensic analysis. The firm is also collaborating with law‑enforcement agencies to identify the perpetrators and mitigate further damage. Officials indicated that the investigation will be ongoing and that updates will be provided as more information becomes available.

Regulatory bodies such as France's data‑protection authority, the CNIL, have been notified, and the company may face compliance reviews under the EU’s GDPR framework. While no fines have been announced, the episode underscores the legal obligations retailers bear to safeguard customer data and maintain operational continuity.

Industry analysts suggest that the attack could accelerate investment in more resilient IT architectures, including segmented networks and real‑time monitoring tools. As the sector evaluates the fallout, the episode serves as a reminder that digital security is now as critical to grocery supply as the physical logistics that deliver food to shelves.