The incident involving Intermarché stores in France serves as a definitive case study for why digital risk must now include the protection of internet-connected hardware. This event has highlighted a dangerous vulnerability in how global corporations manage their exposure to digital threats, particularly as industrial environments become increasingly integrated with network-based controls. Global brokerage firm Lockton has issued a significant warning regarding a widening “cyber insurance physical damage exclusion,” which represents a structural loophole in modern risk management strategies. While the industry has historically focused on the theft of data or the disruption of financial services, the current landscape in 2026 demands a focus on the tangible, physical consequences of a breach. As hackers move away from simple encryption for ransom and toward the active manipulation of machinery, the insurance world is struggling to keep pace. This transition from intangible to tangible risk has left many of the world’s largest retailers and industrial operators fundamentally underinsured for the very scenarios that could cause catastrophic financial ruin. The convergence of Information Technology (IT) and Operational Technology (OT) has effectively turned physical assets into potential digital targets, and without a realignment of insurance policies, the economic fallout for businesses could be insurmountable.
The Mechanism of Physical Sabotage: Lessons From the Cold Chain
The sophisticated attack on the refrigerated supply chain of several French supermarket chains provided a chilling blueprint for the future of industrial sabotage. Unlike traditional cyberattacks that focus on harvesting credit card numbers or locking administrative files, this intrusion bypassed the IT layer entirely and struck the operational technology responsible for environmental management. The intruders targeted the networked controllers and industrial sensors that regulate temperature in commercial-grade refrigeration and freezer units across hundreds of physical locations. By seizing administrative control over these systems, the attackers were able to initiate a “forced defrost cycle” across the entire network. Under normal maintenance conditions, these cycles are used to clear ice from cooling coils, but when manipulated by a malicious actor, they can be turned into a weapon. The attackers overrode factory safety limits, effectively transforming the cooling systems into high-powered heaters that pushed internal temperatures to over 122°F. This specific manipulation did not just lead to a temporary loss of function; it caused an irreversible state of physical spoilage.
The resulting damage from this breach was not merely a loss of data or a temporary system outage, but a total loss of physical inventory that carried massive financial implications. In the Alsace region alone, two stores reported that more than €270,000 worth of merchandise had to be destroyed because it was no longer safe for human consumption. On a national level, the leadership at Intermarché warned that even a single day of such disruption could lead to losses in the tens of millions of euros. Because the food was essentially “cooked” by the cooling units, the hazard was absolute, necessitating the total disposal of fresh and frozen stock. This incident demonstrated that digital commands can have physical outcomes that are as destructive as a fire or a flood. Furthermore, the event placed extreme mechanical stress on the refrigeration hardware itself, raising concerns about the long-term viability of the equipment after such a significant override of standard operational parameters. This type of loss represents a specific, high-velocity risk that traditional cyber defense strategies are often poorly equipped to prevent.
The Complexity of Exclusions: Why Dual Policies Often Fail
A primary concern raised by Lockton involves the “double exclusion” phenomenon, which has left many corporations in a precarious financial position. Standard cyber insurance policies are traditionally designed to handle intangible losses, focusing on the costs of forensic investigations, legal fees, public relations, and the payment of ransoms. However, these policies frequently contain explicit language that excludes coverage for “tangible property damage.” Because spoiled inventory, damaged machinery, and melted electronics are considered physical assets, cyber insurers often argue that these claims fall outside their contractual obligations. This creates a significant hurdle for businesses that have invested heavily in digital protection only to find that the most expensive physical consequences of a breach are not covered. The current market conditions in 2026 show that as these cyber-physical events become more common, the lack of clarity in standard policy wording is leading to protracted legal battles between policyholders and their insurance providers.
Conversely, traditional property insurance policies, which were once the reliable fallback for physical damage, have undergone a significant transformation. Following several high-profile global malware outbreaks and the rising threat of state-sponsored cyber warfare, many property underwriters have introduced strict “cyber exclusions,” such as the NMA 2918 clause. These provisions state that if physical damage is triggered by a digital event—whether it be a virus, a hack, or a remote manipulation of OT systems—the property policy will not respond. This creates what experts call the “Property Insurance Trap,” where a company pays for both a comprehensive cyber policy and a robust property program but remains entirely exposed to a cyber-physical event. As confirmed by the incident in France, companies often discover this gap only after the damage has occurred, leaving them to absorb millions of euros in losses internally. The assumption that physical damage is always covered by property insurance has proven to be a dangerous misconception in the modern era of networked industrial controls.
Financial Magnitude: Assessing the Value of Spoiled Inventory
The financial velocity of a cyber-physical attack is significantly higher than that of a standard data breach, which often takes months to manifest as a bottom-line impact. In a spoilage event, the loss is immediate, visible, and often total, creating an urgent liquidity crisis for the affected firm. When attackers target the cold chain, the value of the lost inventory is only the beginning of the financial drain. Businesses must also contend with the logistical costs of waste removal, as thousands of tons of spoiled food cannot be disposed of through normal channels. Furthermore, the immediate need to restock hundreds of stores creates a massive surge in procurement costs and places immense strain on supply chain logistics. For a large-scale retailer, the cumulative impact of these factors can threaten the company’s quarterly earnings or even its overall solvency. Lockton’s assessment highlights that for organizations operating at a national or global scale, the potential for a coordinated attack on physical infrastructure represents a systemic threat that requires a different tier of financial protection.
The economic implications extend beyond the immediate loss of goods and into the realm of brand reputation and consumer trust. While a data breach might lose a customer’s email address, a physical contamination event or a widespread shortage of fresh food can alienate a customer base for years. If a supermarket chain cannot guarantee the safety of its refrigerated products due to a known digital vulnerability, the long-term erosion of market share can far exceed the immediate cost of the spoiled inventory. In the French case, the threat to the food supply was taken so seriously that it became a matter of national security and public health. This elevation of risk from a corporate IT issue to a public safety concern fundamentally changes the way businesses must value their physical-digital assets. The cost of insurance, therefore, must be weighed against the potential for a total operational shutdown. Boards of directors are now being forced to view the security of their industrial controllers as being just as critical to the company’s financial health as their quarterly revenue targets or their global logistics strategy.
Specialist Solutions: Bridging the Digital and Physical Chasm
To mitigate these catastrophic risks, the insurance market has seen the emergence of specialist coverage known as Cyber-Property Damage and Spoilage insurance. Lockton has been a primary advocate for this type of policy, which is specifically engineered to bridge the gap between traditional cyber and property towers. This specialized coverage is designed to be “affirmative,” meaning it explicitly states that it will cover physical damage resulting from a digital trigger. This removes the ambiguity that often leads to denied claims and provides a clear path to recovery for businesses that rely on internet-connected hardware. In 2026, the demand for these products has surged as more companies recognize that their existing portfolios are insufficient to cover modern threats. These policies are not merely add-ons but are comprehensive financial tools that address the specific nuances of OT environments, where the risks are fundamentally different from those found in standard office IT networks.
Lockton has highlighted that limits for this specialist cover can now reach as high as £650 million, a figure that reflects the massive scale of potential losses in sectors like food retail, pharmaceuticals, and manufacturing. A policy with such a high limit is intended to cover “balance-sheet events”—those incidents that are so large they could jeopardize the financial stability of the entire corporation. This coverage typically includes several critical components, such as protection for the wholesale value of lost inventory and the costs associated with mechanical breakdown of hardware. It also covers business interruption, ensuring that a company is compensated for lost profits during the time it takes to sanitize facilities and restock shelves. Additionally, these policies often include contingent business interruption, which protects the policyholder if an attack on a third-party utility or a critical supplier impacts their ability to maintain physical operations. By providing a dedicated layer of protection, these specialist solutions offer a level of financial certainty that traditional policies simply cannot match in the current threat environment.
Underwriting Standards: The Growing Demand for Operational Transparency
The evolution of cyber-physical risk has forced a significant shift in how insurance companies approach the underwriting process for industrial and retail clients. In the past, an insurance application might have focused almost exclusively on data encryption, firewalls, and employee training related to phishing. However, in the current 2026 landscape, underwriters are demanding far greater transparency into the operational technology layer of a business. Insurers now want to see detailed documentation regarding the security of industrial control systems, networked thermostats, and automated manufacturing lines. The “standard questionnaire” for insurance has expanded to include deep technical inquiries into network segmentation—specifically, whether the systems that control physical machinery are properly isolated from the corporate network and public internet. If a company allows its guest Wi-Fi to share a network with its refrigeration controllers, it will find it nearly impossible to secure high-limit coverage or favorable premium rates.
Furthermore, the concept of “security hygiene” has been redefined to include the rigorous maintenance and patching of OT hardware. This presents a unique challenge, as many industrial systems are designed to operate for decades without significant updates, often running on legacy software that was never intended to be connected to the internet. Insurers like Tokio Marine Kiln have emphasized that while outdated software is a major risk factor, they are looking for evidence of a comprehensive risk management strategy that accounts for these vulnerabilities. Companies are now expected to have an accurate inventory of every connected device on their premises and a clear plan for how those devices are monitored for unusual activity. The ability to demonstrate a proactive approach to OT security has become a prerequisite for accessing the most competitive insurance products. Risk managers must now work in close coordination with facilities managers to ensure that the physical infrastructure of the company meets the same digital security standards as its data centers.
Institutional Integration: Merging Cyber Security with Physical Maintenance
One of the most profound changes resulting from the current cyber-physical threat environment is the necessary convergence of internal corporate departments. Historically, the team responsible for cybersecurity and the team responsible for building maintenance and refrigeration operated in completely separate silos with very little communication. In 2026, this lack of coordination is recognized as one of the greatest risks to an organization’s resilience. The French supermarket incident proved that a security failure in the facilities department can lead to a financial crisis that the IT department is powerless to stop if they do not have visibility into OT systems. Consequently, leading organizations have begun to integrate these functions into a unified risk management framework. This involves cross-training IT professionals in the specifics of industrial control systems and ensuring that facilities managers understand the digital vulnerabilities inherent in the modern equipment they oversee on a daily basis.
This institutional integration also extends to the boardroom, where the conversation around cybersecurity has shifted from a technical IT issue to a broader discussion of operational resilience. Boards are increasingly asking for “stress tests” that simulate a total failure of physical assets due to a digital attack. They want to know not only how the company will stop an intruder but how it will survive the financial impact of a massive spoilage event or a mechanical breakdown. This shift in perspective is driven by the realization that in a connected world, every physical asset is a potential entry point for a malicious actor. By treating facilities management as a core component of the cybersecurity strategy, companies can identify vulnerabilities that were previously overlooked. This holistic approach to risk is the only way to ensure that the company’s physical infrastructure is robust enough to withstand the evolving tactics of modern attackers who seek to cause tangible, real-world destruction.
Strategic Outcomes: Strengthening Corporate Resilience and Protection
The analysis of the 2026 risk landscape revealed that proactive auditing of insurance portfolios was the only effective defense against the “double exclusion” trap. Organizations that successfully navigated this period of transition were those that moved away from the assumption of “silent cyber” coverage and instead sought affirmative, specialist policies. These leaders identified that the legal definitions of “tangible” and “intangible” assets were being used by traditional insurers to narrow the scope of their liabilities, leaving a multi-million-pound gap in protection. By securing dedicated cyber-physical damage and spoilage insurance, these firms were able to transfer the most volatile aspects of their risk to the market, ensuring that a single digital command could not destroy their financial standing. This move toward specialized risk transfer became a hallmark of the most resilient companies in the retail and industrial sectors, providing them with a significant competitive advantage during times of market volatility.
Furthermore, the implementation of more rigorous operational technology standards proved to be a critical component of corporate survival. The companies that thrived were those that treated the security of their physical assets—such as elevators, thermostats, and assembly lines—with the same level of urgency as their financial data. They invested in network segmentation and continuous monitoring of OT environments, which not only reduced the likelihood of a successful attack but also allowed them to secure more favorable terms from underwriters. These actionable steps, which included the thorough documentation of every connected device and the integration of facilities management into the broader cybersecurity framework, established a new gold standard for industrial risk management. Ultimately, the lessons learned from the French supermarket crisis were used to build a more robust and transparent insurance ecosystem, where digital and physical risks were no longer treated as separate entities but as a single, unified challenge to global corporate stability.
