France has accused Iran’s Islamic Revolutionary Guard Corps (IRGC) of orchestrating a series of cyberattacks targeting supermarket refrigeration systems across the country. The attacks disrupted cold-storage equipment at approximately 700 commercial establishments, resulting in spoiled food, damaged equipment and multiple fires.
French Foreign Minister Jean-Noël Barrot announced on November 9 that Iran’s ambassador had been summoned to the Foreign Ministry to face a formal protest. France has also indicated that it will push for additional European Union sanctions against those responsible.
Cyberattacks Targeted 700 Commercial Establishments
The attacks took place in October, with the most significant incident reported on October 12. Hackers remotely manipulated the temperature controls of commercial refrigerators and freezers, causing temperatures to rise dramatically.
Approximately 700 establishments were affected, including supermarkets, independent butcher shops, a slaughterhouse and food-processing facilities.
In several locations, refrigeration temperatures reportedly reached 50 degrees Celsius and remained elevated for around six hours. Businesses were forced to dispose of fresh and frozen food, including meat and ice cream.
At least 15 fires were associated with the incidents. French supermarket chain Intermarché reportedly suffered losses worth tens of millions of euros in a single day.
France Identifies Iran-Linked Cyber Unit
A joint assessment by French intelligence and cybersecurity agencies attributed the attacks to Shahid Kaveha cyber offensive unit affiliated with the IRGC’s Electronic and Cyber Center.
Investigators identified digital infrastructure associated with the group and found traces of the Persian language and internet addresses linked to systems in Iran.
French authorities also identified three alleged associates: Hamid Reza Lashgarian, Mahdi Lashgarian and Reza Salarvand.
The Paris prosecutor’s office has opened a formal judicial investigation and requested international arrest warrants for the alleged unit leader and two deputies.
The investigation includes suspected organised cybercrime and attacks allegedly carried out in the interests of a foreign power.
France Threatens Additional European Sanctions
Barrot described the incident as an unprecedented cyberattack aimed at sabotage on French soil. He said the attack represented a serious threat to France’s national interests and public security.
France has summoned the Iranian ambassador to communicate its strongest condemnation of the incidents.
The French government has also announced plans to seek European-level sanctions against individuals and entities responsible for the attacks. Additional measures could follow as the investigation progresses.
Iran has previously rejected allegations of conducting malicious cyber operations. The latest accusations have emerged amid heightened geopolitical tensions between Tehran and Western governments.
Further Attacks Raise Concerns About Critical Infrastructure
The supermarket incidents have been followed by additional attacks targeting refrigeration systems in Europe.
In France, another cyber incident involving blood bank refrigeration equipment was reportedly thwarted before it could damage blood supplies or samples. Supermarkets in Sweden, Belgium, Luxembourg, Ireland and Estonia also experienced freezer and refrigerator disruptions suspected to be linked to cyberattacks.
The incidents have raised concerns about the cybersecurity of connected industrial equipment. Investigations have indicated that outdated firmware and weak security configurations could have made some refrigeration systems vulnerable to remote interference.
Summary
France has blamed an Iran-linked IRGC cyber unit for attacks that disrupted refrigeration systems at around 700 commercial establishments. The incidents caused food losses, equipment damage and at least 15 fires. Paris has summoned Iran’s ambassador, sought international arrest warrants and announced plans to pursue European sanctions. Further incidents involving refrigeration systems have raised concerns about the security of connected infrastructure.