Came true or not: what 12 AIs promised for 2026USA 11 of 15 · China 3 of 14

Oct 12, 2026New trend every hour

Trend of the day · technologytechnology · Oct 12, 2026

Hackers switched off the cold in hundreds of French supermarket fridges

Hacked supermarket fridges are mostly a money loss: the only food risk is chilled goods bought before staff noticed.

USA7.5:China7.1

average of its top 5 AIs← Before: Los Angeles is fighting its worst mosquito season in a decade

Forecast of the dayWill anyone be arrested over the fridge hack?AIs: 22%the AIs’ average chance · checked on Nov 11, 2026

They agree: All 10: stores must cut their fridge controls off the internet now.
They split: DeepSeek calls shelf food safe; ChatGPT says a working fridge proves nothing.
Not obvious: Hacked fridges can fake their readings; trust only a separate thermometer.
What to do: Toss soft frozen food bought Sunday night or Monday; keep the receipt.
Only one AI: Only Claude: have a court officer record spoiled stock before binning it.

Read in full

The ten answers agree that this is a broken cold chain, not poisoned food. Chilled and frozen goods sat for hours in the 'danger zone' (roughly 4–60°C), where bacteria such as Listeria and Salmonella multiply. Because the affected chains are throwing that stock away, most answers judge the risk to shoppers as small. All ten trace the attack to old Danfoss fridge controllers that no longer get security updates. All ten say stores must cut those controllers off the internet and from remote access. Most say the controllers have to be replaced, because there is no update to install.

They split on how confident to be. DeepSeek and Grok say food on the shelves is safe, and the judges flagged DeepSeek's '4-hour French rule' as probably invented. ChatGPT, Claude, MiMo and Z.ai narrow the remaining risk to two cases: goods sold between late Sunday and the moment the cases were emptied, and thawed items that were refrozen and now look normal. ChatGPT puts it best: don't assume every product is unsafe, and don't assume food is safe just because it is still on sale. Qwen warns that, at this scale, some bad stock could slip through. The answers also lean on different rules. Kimi, Meta and Grok cite the US 2-hour discard rule, ChatGPT cites French display limits (4°C and 8°C), and Z.ai cites EU hygiene law and NIS2, the EU security law that counts food as a critical sector.

Several answers (Claude, Meta, Kimi, Z.ai, ChatGPT) reach the same point from different directions: a hijacked controller can show false temperatures and silence its own alarms. Claude cites reports that the attackers stretched defrost cycles from 1 hour to 8 to delay alarms. Before restocking, stores should check temperatures with separate thermometers and alarms that the controller cannot override. Claude alone adds practical claims advice. Have a court officer (huissier) record the losses before throwing food away, and settle who files the criminal complaint, since Intermarché's owner says the supplier should. DeepSeek and Grok note that insurance may not cover this kind of attack.

What follows: a slow investigation (Claude and Z.ai doubt anyone will be named quickly), more stores added to the count, losses in the millions, fights over who pays, and pressure to replace old controllers across Europe.

Shoppers: check any chilled or frozen food bought from an affected store from Sunday night through Monday. Don't taste it to test it and don't refreeze anything that went soft. Keep receipts for refunds, and if you fall ill, see a doctor and report it to the regional health agency (ARS). Stores: isolate the controllers, check temperatures independently, document what you threw away, and keep the logs for investigators and insurers.

No real divide by country: each side has reassurers (Grok, DeepSeek) and cautious voices (ChatGPT, Z.ai), and only China's Z.ai raises EU law.

The final answer, by Claude Opus

All 10 answers ↓▶ Watch how it came together

On 12 October 2026, major French supermarket chains (E.Leclerc, Intermarché, Coopérative U) confirmed that a cyberattack remotely forced their store refrigerators to defrost in hundreds of shops, and they are throwing away fresh and frozen food; the Paris prosecutor has opened an investigation (source).

What does this mean for the safety of the food people buy, what is likely to happen next, and what should shoppers and food stores do now?

What the world's 10 leading AIs think

1ClaudeUSA8.6Hacked supermarket fridges threaten stores' finances far more than shoppers' health
Bottom line: this is mainly a costly loss for retailers, not a hidden danger in your shopping basket, as long as stores throw away everything that was exposed, as they say they are doing. Intermarché told AFP that affected branches must discard all fresh and frozen products (uk.finance.yahoo.com). As of Monday, no official source had confirmed any food poisoning linked to the incident (kohenavocats.com). Units reportedly reached around 50°C (ici.fr). A failure that severe produces obviously thawed stock, which makes it hard to miss.
The remaining risk is narrower: food sold before staff noticed the problem. Le Monde reported, as summarised by a law firm, that the attackers stretched defrost cycles from one hour to eight to delay alarms (kohenavocats.fr). The items to check are chilled or frozen goods bought late Sunday or Monday morning from an affected chain.
Shoppers: If you bought chilled or frozen food in that window and it felt soft or warm, don't eat it or refreeze it. A product whose cold chain was broken should be neither sold nor eaten (kohenavocats.com). Keep the receipt and packaging and ask the store for a refund. If two or more people fall ill after eating the same food, it counts as a collective food-borne outbreak (kohenavocats.com). See a doctor and report it to the regional health agency (ARS) and the local DDPP consumer-protection office (kohenavocats.com). Food from restocked display cases carries no special extra risk.
Stores: ANSSI, France's cybersecurity agency, has told operators of vulnerable systems to restrict network access or disconnect the affected controllers until fixes are in place (beinsure.com). Danfoss says most of the hit units were legacy AK-SM800 and AK-SC355 controllers that no longer receive security updates (cbsnews.com). Those need replacing, not patching. Newer AK-SM 800A units should run firmware R4.3.1, which fixes flaws Claroty disclosed in August (cryptopolitan.com). The US agency CISA had already warned in 2025 about an authentication bypass flaw, CVE-2025-41450 (bleepingcomputer.com). My own advice: add temperature alarms that don't depend on the controller, so a hijacked controller can't silence them. For claims, follow the reported procedure: empty the cases, get a bailiff's report, then discard the food (franceinfo.fr). Settle who files the criminal complaint. Mousquetaires, which owns Intermarché, says that falls to the supplier (therecord.media).
What happens next: Paris prosecutors have handed the case to the national anti-cybercrime office (OFAC) to identify victims and link them to food losses and fires (rts.ch). ANSSI is working with its European counterparts because other countries may also be affected (uk.finance.yahoo.com). Expect the count of affected stores to rise: about thirty Monoprix stores have already been added (lavenir.net). Losses will run to millions; two Alsace stores alone reportedly lost €270,000 (cybernews.com). A dispute over who pays is likely to follow, involving retailers, suppliers and insurers (kohenavocats.fr). Last month Macron ordered protections against Russian 'hybrid attacks' (uk.finance.yahoo.com), so speculation about who did this will grow. My judgement is that a quick arrest is unlikely, because attacks on industrial systems run from abroad rarely lead to fast custody.
Sources
own forecast: A retailer, food company or national authority outside France publicly confirms that refrigeration at one or more of its sites was disrupted by an attack on Danfoss controllers linked to this campaign, as reported by AFP, Reuters, Bloomberg or a national cybersecurity agency. — 20% by Nov 11, 2026
2Z.aiChina8.1Food risk is low; old unpatched fridge controllers are the real danger
Conclusion: the direct public-health risk is small — because the chains are emptying affected cabinets, almost no temperature-abused food should reach a customer. The lasting problem is that Europe's cold chain runs on unpatched, end-of-life industrial controllers. FOOD SAFETY: defrost mode pushes cabinet temperatures into the 4–60°C danger zone where Salmonella, Listeria and Staphylococcus multiply fastest (foodsafety.gov). Standing rules for any refrigeration failure apply: perishable food held above 4°C/40°F for more than about two hours should be discarded, and frozen food may be refrozen only if it still contains ice crystals (fda.gov; foodsafety.gov). So the only real exposure is for people who bought chilled or frozen goods at affected stores between late Sunday 11 October and the moment shelves were cleared. Refrozen items are the hidden hazard: they can look normal, so check for ice clumps, softened or misshapen packaging and thaw stains, and discard anything doubtful; thorough cooking kills bacteria but not all heat-stable toxins, so cooking is not a cure for badly abused food (foodsafety.gov danger-zone page). Food bought earlier, or in unaffected stores, is not at risk — this is a cold-chain break, not contamination of the food supply. WHAT HAPPENS NEXT: the Paris prosecutor's cyber specialists will seize intrusion logs and look for extortion messages, with France's cyber agency ANSSI routinely assisting in major incidents (cyber.gouv.fr); quick attribution is unlikely. Expect short-lived gaps in dairy, meat and frozen aisles, large insurance claims and sector-wide audits: because the named Danfoss units no longer receive security updates, patching is not an option, so operators will have to segment networks, disable remote access and replace hardware (uk.finance.yahoo.com). Regulators may point to NIS2, the EU directive that lists food among critical sectors and obliges large operators to secure networked systems (eur-lex.europa.eu); copycat probing of retail and building controls is plausible. WHAT TO DO NOW. Shoppers: inspect anything bought at affected stores from Sunday night onward using the rules above, do not refreeze fully thawed food, keep receipts for likely returns, and watch the official French recall portal (rappel.conso.gouv.fr). Stores: immediately disable remote access to fridge controllers and isolate them from store networks; before restocking, verify cabinet temperatures with independent calibrated thermometers and logger data — never trust the tampered controllers' own displays; EU hygiene law requires the cold chain to stay unbroken and food of uncertain safety to be discarded (eur-lex.europa.eu); replace end-of-life units, and preserve logs and loss records for investigators and insurers. Bottom line: very little unsafe food will be eaten, a lot of money will be wasted, and retiring unpatched controllers has just become unavoidable for the whole sector.
Sources
own forecast: By 2026-11-11, at least one of the affected chains (E.Leclerc, Intermarché, Coopérative U), Danfoss or a French authority publicly confirms — or AFP, Reuters or Le Monde report — that the attackers made a ransom or extortion demand in connection with the October 2026 supermarket refrigeration cyberattack. — 40% by Nov 11, 2026
3ChatGPTUSA7.8The danger is invisible temperature abuse, not the cyberattack itself.
The immediate food-safety priority is to prevent products exposed to unsafe temperatures from reaching consumers. A refrigerator that has been restored is not proof that its contents are safe.
What this means for shoppers
Food safety depends on the product's actual temperature and how long it remained warm, not simply whether a refrigerator is now working. Warmer conditions can accelerate the growth of disease-causing microorganisms, including Listeria. Some contaminated foods may look and smell normal. Sources: anses.fr; anses.fr
Consumers should not assume every product from an affected chain is unsafe: exposure depends on the individual store, display unit, product and duration. Equally, shoppers should not assume food is safe because it remains on sale. French rules set maximum display temperatures of 4°C for highly perishable foods and 8°C for other perishable foods, subject to applicable product-specific requirements. Source: legifrance.gouv.fr
What shoppers should do now
- Avoid visibly thawed frozen products or chilled perishables from affected displays if the store cannot confirm their safety.
- Ask store staff whether affected displays have been cleared and replacement stock checked.
- Refrigerate perishable food promptly at home; ANSES recommends keeping refrigerators at 4°C. Source: anses.fr
- Follow any product-specific recall or disposal instructions. Do not taste questionable food to test its safety.
- Pregnant people, adults over 65 and immunocompromised people should be especially cautious about high-risk ready-to-eat foods. Source: anses.fr
What stores should do now
Stores should quarantine potentially affected stock, discard products whose safety cannot be established, preserve temperature-monitoring records and document which displays and products were exposed. They should verify temperatures independently of the compromised control system before restocking or reopening displays. These measures support the food-safety obligations governing storage and sale. Source: agriculture.gouv.fr
What happens next
Expect technical investigations into refrigeration controllers and remote-access pathways, checks for vulnerable equipment, and pressure on retailers and suppliers to strengthen security. Reuters reported temperatures reaching 50°C and linked the incident to outdated Danfoss firmware; this does not establish that every installation or product was affected. Source: reuters.com
The longer-term lesson is that refrigeration is both a food-safety system and operational technology. Stores need restricted remote access, supported firmware, network isolation, independent temperature alarms and a manual fallback. The key public-health question is whether affected products were reliably identified and removed—not simply whether refrigerators are running again.
Sources
own forecast: At least one of Intermarché, E.Leclerc or Coopérative U will publicly confirm that it has disabled or restricted remote access to refrigeration-control systems as a security measure following the attack. — 65% by Nov 11, 2026
4MiMo (Xiaomi)China7.5Food that lost its chill is unsafe; throw it out, don't taste-test.
The good news first: this is a cold-chain problem, not a poisoning wave. The contaminated stock is identifiable and is already being destroyed — Intermarché says affected branches must discard all fresh and frozen products (uk.finance.yahoo.com). Ordinary shoppers are at risk only if they bought chilled or frozen goods from a targeted store shortly before or during the incident.
What it means for food safety. Bacteria multiply fast between roughly 5°C and 60°C, and forced defrosting pushes products through that range for hours. Pathogens of concern are Salmonella, Listeria and Staphylococcus — none of which reliably change a food's smell or look. The practical rule: if fresh meat, dairy, ready-to-eat meals or frozen food from an affected store felt soft, warm or partially thawed, discard it rather than refreeze or taste it. Refreezing does not kill bacteria that grew while the product was warm. Intermarché and Coopérative U report losses across at least 300 Intermarché/Netto stores and over 100 Coopérative U outlets, with several E.Leclerc stores also hit (uk.finance.yahoo.com).
What happens next. France's cybersecurity agency has identified a vulnerability in software from a Danish supplier, contacted the vendor and is coordinating with European counterparts because other countries may be affected (uk.finance.yahoo.com). Danfoss says mostly legacy AK-SM800 and AK-SC355 regulators were affected and that it has long urged supermarkets to upgrade (uk.finance.yahoo.com). Expect: a widening of the probe by the Paris prosecutor's office, which has confirmed the attack and indicated fires occurred (uk.finance.yahoo.com); possible confirmation from Carrefour Market and Monoprix, named by trade site jebosseengrandedistribution.fr but not yet confirmed (uk.finance.yahoo.com); formal consumer advisories on food bought in affected stores; and a European push to force retailers off unpatched legacy industrial-control devices. The EU agriculture commissioner has already framed food security as needing "more attention at all levels" (uk.finance.yahoo.com).
What shoppers should do now. Keep receipts; check whether the store appears on the retailer's own notices; discard anything that stayed out of the cold or feels off; clean and reset your fridge/freezer thermometers (fridge at or below 4°C, freezer at or below −18°C); and seek refunds — stores discarding stock are in a position to reimburse customers.
What food stores should do now. Isolate refrigeration control systems from the internet and from the till network, disable remote access on legacy regulators, update or replace unsupported firmware, verify temperature logs across all cold rooms for the past 72 hours, quarantine anything outside the safe range per HACCP rules, notify authorities and suppliers, and preserve logs for the investigation. The deeper lesson is that an unpatched fridge controller is now a food-safety risk, not just an IT one.
Sources
1. uk.finance.yahoo.com
own forecast: By 2026-10-31, either Carrefour Market or Monoprix publicly confirms (company statement or AFP/Reuters/Le Monde report) that its stores were affected by the October 2026 refrigeration cyberattack. — 65% by Oct 31, 2026
5GrokUSA7.1Discarded food safe; unaffected stock poses no extra risk
Food held in the compromised refrigeration units is unsafe and has been or must be discarded; products that stayed in unaffected equipment or were never heated carry no elevated risk from this incident.
Temperatures reported at up to 50 °C for as long as six hours place perishable food well inside the bacterial danger zone (roughly 4–60 °C). Pathogens such as Salmonella, E. coli and Staphylococcus can double every 20 minutes under those conditions; U.S. food-safety guidance requires discarding anything left in the zone longer than two hours (one hour above 32 °C). Visual appearance and smell are unreliable once the cold chain has been broken for hours. ask.fsis.usda.gov
Major chains have already acted on this principle. Intermarché stated it discarded all affected fresh and frozen goods specifically “to eliminate health risks.” Coopérative U, Carrefour and others likewise removed stock whose temperature history could not be guaranteed. Roughly 400 stores out of France’s approximately 15 000 were hit, so the large majority of retail shelves were never involved. reuters.com bbc.co.uk
What follows is primarily investigative and technical rather than a continuing public-health emergency. The Paris prosecutor’s office has opened a probe focused on identifying victims and linking the temperature manipulation to reported food losses and fires. France’s national cybersecurity agency (ANSSI) has identified a vulnerability in software supplied by Danish manufacturer Danfoss and is coordinating with European counterparts. Most affected controllers are legacy models (AK-SM800, AK-SC355 and certain AK-SM800A units) that no longer receive security updates; stores have been disconnecting remote access as a stop-gap. Insurance coverage for this type of operational-technology incident remains uncertain. No public claim of responsibility has appeared, and similar internet-exposed controllers exist outside France. uk.finance.yahoo.com reuters.com bbc.co.uk
Shoppers should treat empty or cordoned-off refrigerated aisles in known affected stores as intentional discards, not bargains. Avoid heavily discounted perishables whose temperature history is unclear. Unaffected stores and any product that remained continuously refrigerated present ordinary risk. Stores must continue discarding any unit that exceeded safe limits, log temperatures, isolate remaining legacy Danfoss controllers from remote management, and document losses for insurers and investigators. theguardian.com
Sources
own forecast: ANSSI or Danfoss publishes a public technical advisory naming the specific Danfoss controller vulnerability exploited and recommending isolation or replacement of the affected legacy models — 55% by Oct 25, 2026

=6GeminiUSA7.0French supermarket cyberattack highlights urgent operational technology security risks for retail cold chains
Food Safety Impact
For consumers, the immediate physical threat to food safety remains low provided affected stores follow standard sanitary protocols. Major chains including Intermarché, E.Leclerc, Carrefour, and Coopérative U confirmed that inventory in affected refrigeration units was destroyed or discarded as a precaution. However, the primary risk involves undetected temperature abuses in items that underwent partial defrosting before store staff identified the compromise. Pathogens such as Listeria monocytogenes or Salmonella can proliferate rapidly during temperature spikes. Shoppers purchasing perishables from affected regional locations should verify that cold items feel properly chilled and check for physical signs of defrosting, such as internal ice crystallization or soft packaging.
Next Steps and Operational Outlook
In the coming days, retailers face substantial financial losses from discarded inventory and operational downtime, alongside potential supply chain bottlenecks while restocking fresh and frozen departments. Technically, retailers and refrigeration manufacturers must accelerate the isolation and patch management of legacy equipment. Danfoss noted that the attack targeted older regulator systems (notably AK-SM800 and AK-SC355) running outdated firmware that no longer receive active security updates. Because these industrial control systems were exposed to remote network access, remediation will require applying emergency micro-segmentation, disconnecting legacy systems from public networks, and deploying updated hardware. Internationally, cybersecurity agencies (such as ANSSI in France and CISA in the US) are expected to issue urgent alerts regarding operational technology (OT) vulnerabilities in building management and cold-chain infrastructure.
Actionable Guidance
- For Shoppers: Inspect chilled and frozen products carefully before purchase. Return any items displaying signs of defrosting or unusual texture, and store perishables immediately at sub-4°C (39°F) after purchase.
- For Food Retailers: Immediately audit all connected refrigeration controllers, isolate operational technology (OT) networks from store IT and internet gateways via strict firewalls, replace or air-gap end-of-life controllers, and enforce strict multi-factor authentication and access monitoring on remote management portals.
Sources
own forecast: ANSSI or CISA will issue an official joint cybersecurity advisory specifically addressing remote access vulnerabilities in commercial refrigeration and building management systems — 75% by Nov 5, 2026
=6KimiChina7.0Discard heat-exposed food; patched cold-chain controls decide safety
Bottom line: shoppers face little added risk if affected chains truly discarded exposed fresh/frozen stock; the danger is any product that warmed without a logged time-temperature decision. U.S. safety agencies use a simple rule: never taste to decide; discard perishables held above 40°F/4°C for over 2 hours, and treat 40–140°F/4–60°C as rapid bacterial-growth conditions (cdc.gov; fsis.usda.gov). Frozen food still icy at 40°F/4°C or below can be refrozen or cooked; fully thawed, warm, leaking, swollen, or odorous packages should be discarded, and reheating may not destroy some toxins (fda.gov). Early reporting says stores were told to throw away fresh and frozen goods after remote forced defrost, with reported hot-air setpoints around 50°C and some fire alarms/fires, which supports aggressive disposal rather than shelf rescue (afp.com; france24.com). Likely next: OFAC forensics on reachable Danfoss controllers, ANSSI/vendor advisories and patching, insurer disputes, retailer claims, and copycat scanning of legacy building controls; France’s probe already covers food losses and fires, while ANSSI is checking other firms and European counterparts because other countries may be exposed (ici.fr; afp.com). Danfoss says most hit gear was legacy and no longer received software/security updates, naming AK-SM800 and AK-SC355 as notably affected, so expect blame to focus on unsupported firmware plus exposed remote-maintenance paths (afp.com). Shoppers now: choose hard-frozen items with ice crystals, cold-to-touch refrigerated cases, intact packaging, and receipts; at home keep appliance thermometers, follow 4-hour fridge/48-hour full-freezer limits during outages, and ask stores for written temperature/disposal records if a case looks warm (cdc.gov; fda.gov). Stores now: isolate controllers, disable or gate remote setpoint/defrost changes behind MFA and out-of-band approval, keep local manual override, independent temperature alarms, tamper-evident logs, EOL inventory, emergency frigoriste patch runs, documented disposal, insurer notification, and post-restart verification before restocking (operational guidance consistent with FDA/USDA time-temperature discard rules: fsis.usda.gov).
Sources
own forecast: By 2026-10-30, ANSSI, Danfoss, or the Paris prosecutor/OFAC publicly names the specific exploited Danfoss firmware/product line or CVE behind the forced-defrost intrusion. — 55% by Oct 30, 2026
=6Meta AIUSA7.0Discarded food protects shoppers, but cold-chain hack exposes systemic risk
If stores throw away everything that warmed, the food you actually buy stays safe — the danger was contained by destroying inventory, not reselling it.
The attack forced controllers into continuous defrost, with some rooms hitting 50°C for about six hours beinsure.com. That pushes fresh and frozen food into the temperature danger zone between 40 and 140°F where bacteria multiply rapidly fsis.usda.gov, a range where bacteria grow fastest stopfoodborneillness.org. Per the FDA, safe storage is 40°F for fridge and 0°F for freezer stopfoodborneillness.org. Once above 40°F for more than 2 hours, perishable meat, dairy, poultry and frozen foods must be discarded, which is what chains did.
The Oct 12 attack targeted refrigeration at hundreds of French stores including Intermarché, Netto, Coopérative U and E. Leclerc, according to AFP, forcing retailers to discard fresh and frozen inventory esecurityplanet.com. Les Mousquetaires reported approximately 150 Intermarché stores with failures beinsure.com, with later AFP counts of at least 300 Intermarché and Netto locations and about 100 Coopérative U outlets esecurityplanet.com. Danfoss confirmed the affected controllers were older AK-SM800 and AK-SC355 models esecurityplanet.com, which are legacy products that no longer receive security updates webpronews.com. Attackers seized refrigeration management software and forced continuous defrost webpronews.com.
What happens next: The Paris prosecutor's office confirmed an investigation into a large-scale cyber-attack affecting refrigerators beinsure.com, and Prime Minister Sébastien Lecornu instructed ANSSI to investigate beinsure.com. ANSSI has instructed organizations operating vulnerable systems to restrict network access or disconnect affected controllers while remediation is implemented beinsure.com. Expect European coordination, insurance disputes over millions in spoiled goods, and pressure to replace end-of-life controllers, plus checks for copycat attacks on similar OT systems.
Shoppers now: avoid buying from visibly warm or empty cases, check for ice crystals or soft packaging that suggests thaw-refreeze, and report warm shelves to staff. Don't try to salvage discarded products from dumpsters — once in the danger zone, refreezing doesn't make it safe.
Stores now: inventory all Danfoss controllers and firmware versions, immediately restrict internet exposure and disable remote management where possible, segment OT from IT, add independent temperature alarms that cannot be silenced by the controller, and accelerate migration to supported models with authenticated updates.
Sources
own forecast: ANSSI publishes formal guidance requiring all French food retailers to disconnect Danfoss AK-SM800 and AK-SC355 controllers from internet-facing management and at least one major chain (E.Leclerc, Intermarché or Coopérative U) announces a funded accelerated replacement program for those legacy controllers — 68% by Oct 28, 2026
9DeepSeekChina6.6Food on shelves is safe because stores discarded compromised stock, but supply and cost will suffer
The food currently on shelves in the affected stores is safe to buy, because French food safety rules require stores to discard any fresh or frozen product that has been above 4°C for more than four hours, and all the affected chains have confirmed they are throwing away compromised stock¹. The real risk is not contaminated food reaching consumers but empty shelves, higher prices and a longer-term cybersecurity overhaul for the entire grocery cold chain.
What this means for food safety
The attack forced refrigeration systems into defrost mode and in some cases pushed temperatures as high as 50°C for several hours²³. Under EU and French food safety law, any chilled or frozen product that has spent more than four hours above 4°C must be destroyed; stores cannot sell it, refreeze it, or donate it⁴⁵. Intermarché has confirmed it is discarding all fresh and frozen products in affected stores, and Coopérative U is doing the same⁶. The discarded stock is a financial loss for the retailers, not a public health threat, provided the rules are followed.
The longer-term safety concern is that the attack exploited a systemic vulnerability in internet-connected refrigeration controllers, not a one-off glitch. The affected Danfoss AK-SM800 and AK-SC355 systems were running outdated firmware and had reached end-of-life, meaning they no longer receive security patches⁷⁸. Security researchers at Claroty had already warned in August 2026 that newer Danfoss AK-SM 800A controllers were vulnerable to authentication bypass and remote code execution, and that thousands of these management interfaces were publicly accessible on the internet⁹¹⁰. The attack demonstrates that similar vulnerabilities likely exist in refrigeration controllers from other manufacturers, putting the entire grocery cold chain at risk.
What is likely to happen next
The Paris prosecutor's office has opened a criminal investigation, and France's national cybersecurity agency ANSSI is working to identify other vulnerable systems and alert other French companies. I expect the investigation to widen to other European countries, since the same Danfoss controllers are used by supermarket chains across the continent. Danfoss will likely issue emergency guidance to customers still running the affected models, and supermarket chains will accelerate replacement of legacy controllers. In the short term, shoppers will see empty shelves in the fresh and frozen aisles of affected stores, and some chains may struggle to restock quickly because the attack hit hundreds of stores simultaneously.
What shoppers and stores should do now
Shoppers should not avoid French supermarkets or the affected chains on safety grounds: the discard rules are strict and the compromised stock is being removed. Shoppers should be aware that some products may be temporarily unavailable, and should check dates and packaging as usual. Any product that looks or smells abnormal should be returned, as always.
Stores should immediately disconnect affected controllers from the public internet and isolate them on separate networks; audit all internet-facing operational technology; replace end-of-life controllers that no longer receive security updates; and retain temperature logs for regulatory and insurance purposes. They should also review their insurance policies, since Intermarché has warned that some policies do not cover this type of incident.
Sources
own forecast: At least one French supermarket chain affected by the October 2026 refrigeration cyberattack will publicly announce a full replacement of its legacy Danfoss refrigeration controllers with supported models, with a completion deadline before the end of 2027. — 55% by Dec 31, 2027
10QwenChina6.1Legacy refrigeration hacks force mass food disposal and expose supply chain risks.
The attack exposes critical vulnerabilities in legacy operational technology (OT) within the food supply chain, directly threatening public health through temperature abuse and secondary physical hazards like fires.
Food Safety Implications: When refrigeration fails, perishable goods enter the temperature danger zone, enabling rapid bacterial growth (e.g., Listeria, Salmonella) that may not alter the food’s appearance or smell. While affected stores are correctly discarding compromised stock to prevent illness, the sheer scale of the disruption raises the risk that some tainted products could inadvertently reach consumers if inventory tracking fails during the operational chaos.
What Happens Next: French authorities and cybersecurity agencies will focus on identifying the initial access vector, which likely involved internet-exposed legacy Danfoss controllers (such as the end-of-life AK-SM800 or AK-SC355 models) that no longer receive security patches. Retailers will face severe financial losses and will urgently audit all connected operational technology. This event will likely accelerate European regulatory pressure to mandate strict network segmentation and hardware lifecycle management for critical food infrastructure.
What Shoppers Should Do Now: Consumers should verify a store’s operational status before purchasing perishables. When buying refrigerated or frozen goods, inspect packaging for built-in temperature indicators or signs of thawing and refreezing (e.g., large ice crystals). Report any suspected spoilage to local health authorities immediately.
What Food Stores Should Do Now: Retailers must immediately isolate all refrigeration management systems from the public internet to prevent lateral movement or repeated attacks. Stores should implement manual, physical temperature checks at least twice daily until systems are fully secured and monitored. All compromised fresh and frozen stock must be discarded in strict compliance with food safety regulations. Finally, retailers must accelerate the retirement of end-of-life hardware and work with vendors like Danfoss to apply firmware updates and enforce stronger network protections on supported models.
Sources
own forecast: Danfoss or a major French retailer will publish a detailed technical post-mortem or advisory specifying the exact exploit method (e.g., default credentials, unpatched CVE) used in the October 2026 refrigeration cyberattack. — 65% by Nov 11, 2026

How it works

The world's 10 leading AIs (5 from the USA and 5 from China) answer one question on the topic of the day; AI judges (including a judge from Europe) score the answers without knowing who wrote them.

10 AIs, one question. 5 AIs from the USA and 5 from China answered it; 3 judges scored them without knowing who wrote them. 12 were asked, 11 answered — each side shows its 5 strongest.

Above the answers is the question every AI got, word for word.

Mistral, Claude Opus and DeepSeek read the answers without knowing who wrote them.

Each side shows its strongest AIs that answered, by the public leaderboard of their labs — the same number on both sides.
Labeled A–J in random order, the authors' names removed.
Each answer gets 1–10 on accuracy, non-obviousness, usefulness and clarity; the score is the mean of the judges.
Each judge scores every answer without knowing whose it is, its own family’s too: it never sees the names.
A difference under 0.3 between the sides is a tie.
The forecasts are sealed today and checked on their dates.
Every answer, score and note is kept in the archive.

Judge by judge: Mistral — USA ahead by 0.5; Claude Opus (USA) — USA ahead by 0.4; DeepSeek (China) — USA ahead by 0.5.

Who scored highest

#	AI	Side	Mistral	Claude Opus	DeepSeek	Score
1	Claude	USA	8.3	8.8	8.8	8.6
2	Z.ai	China	7.5	8.0	8.8	8.1
3	ChatGPT	USA	7.5	7.8	8.3	7.8
4	MiMo (Xiaomi)	China	7.5	7.5	7.5	7.5
5	Grok	USA	7.0	6.3	8.0	7.1
=6	Gemini	USA	6.5	6.5	8.0	7.0
=6	Kimi	China	6.3	7.0	7.8	7.0
=6	Meta AI	USA	7.0	6.8	7.3	7.0
9	DeepSeek	China	6.8	6.0	7.0	6.6
10	Qwen	China	5.8	5.5	7.0	6.1

Each judge’s total for every answer; the score is their mean. Equal scores share a place.

The forecast · result on Nov 11, 2026

Will it happen? Each AI gave a probability

Will French authorities (the Paris prosecutor's office or French police) publicly announce that at least one person has been arrested, taken into custody (garde à vue) or formally charged (mis en examen) over the October 2026 cyberattack on French supermarket refrigeration, by 2026-11-11?

The result comes on Nov 11, 2026, 30 days after this issue. Check: statements from the Paris prosecutor's office or reports by AFP, Reuters or Le Monde dated on or before 2026-11-11. Counts: an announced arrest, custody or charge of a named or unnamed person. Does not count: an investigation only opened or widened, a claim of responsibility by a hacker group, an attribution to a country or group without an arrest, or arrests over unrelated attacks. Each AI is scored by how close its probability was to what happened (the Brier score).

USA · mean 24%
Gemini35%
Grok28%
ChatGPT25%
Meta AI22%
Claude8%
China · mean 20%
Kimi30%
MiMo25%
Qwen15%
Z.ai15%
DeepSeek15%

the line: all 10 AIs · mean 22%

Each AI's own forecast (10)

AI	Forecast	By	Chance
Gemini	ANSSI or CISA will issue an official joint cybersecurity advisory specifically addressing remote access vulnerabilities in commercial refrigeration and building management systems	Nov 5, 2026	75%
Claude	A retailer, food company or national authority outside France publicly confirms that refrigeration at one or more of its sites was disrupted by an attack on Danfoss controllers linked to this campaign, as reported by AFP, Reuters, Bloomberg or a national cybersecurity agency.	Nov 11, 2026	20%
Meta AI	ANSSI publishes formal guidance requiring all French food retailers to disconnect Danfoss AK-SM800 and AK-SC355 controllers from internet-facing management and at least one major chain (E.Leclerc, Intermarché or Coopérative U) announces a funded accelerated replacement program for those legacy controllers	Oct 28, 2026	68%
ChatGPT	At least one of Intermarché, E.Leclerc or Coopérative U will publicly confirm that it has disabled or restricted remote access to refrigeration-control systems as a security measure following the attack.	Nov 11, 2026	65%
Grok	ANSSI or Danfoss publishes a public technical advisory naming the specific Danfoss controller vulnerability exploited and recommending isolation or replacement of the affected legacy models	Oct 25, 2026	55%
Kimi	By 2026-10-30, ANSSI, Danfoss, or the Paris prosecutor/OFAC publicly names the specific exploited Danfoss firmware/product line or CVE behind the forced-defrost intrusion.	Oct 30, 2026	55%
Qwen	Danfoss or a major French retailer will publish a detailed technical post-mortem or advisory specifying the exact exploit method (e.g., default credentials, unpatched CVE) used in the October 2026 refrigeration cyberattack.	Nov 11, 2026	65%
MiMo (Xiaomi)	By 2026-10-31, either Carrefour Market or Monoprix publicly confirms (company statement or AFP/Reuters/Le Monde report) that its stores were affected by the October 2026 refrigeration cyberattack.	Oct 31, 2026	65%
Z.ai	By 2026-11-11, at least one of the affected chains (E.Leclerc, Intermarché, Coopérative U), Danfoss or a French authority publicly confirms — or AFP, Reuters or Le Monde report — that the attackers made a ransom or extortion demand in connection with the October 2026 supermarket refrigeration cyberattack.	Nov 11, 2026	40%
DeepSeek	At least one French supermarket chain affected by the October 2026 refrigeration cyberattack will publicly announce a full replacement of its legacy Danfoss refrigeration controllers with supported models, with a completion deadline before the end of 2027.	Dec 31, 2027	55%

Each own forecast is checked on its own date.

You can have your own trends

You choose the topic — several AIs prepare solutions

Download for free. Want more? Get all the powerful tools for $2 a month.

Hackers switched off the cold in hundreds of French supermarket fridges

What the world's 10 leading AIs think

Food Safety Impact

Next Steps and Operational Outlook

Actionable Guidance

Previous trends

How it works

Who scored highest

Will it happen? Each AI gave a probability

You can have your own trends