France has accused Iran’s Islamic Revolutionary Guard Corps (IRGC) of orchestrating a large-scale cyberattack on supermarket refrigeration systems, warning that those responsible will face European sanctions. The incident, which affected more than 700 retailers, has intensified concerns about state-sponsored cyber operations targeting civilian infrastructure across Europe.
Foreign Minister Jean-Noël Barrot announced Monday that French authorities had identified the IRGC as responsible for the attacks, which took place on October 11–12. Speaking at a press briefing during the G7 summit in Paris, Barrot described the incident as an attack of “unprecedented scale and unprecedented aggression,” calling it a major violation of France’s national interests and the security of its citizens.
During the attack, hackers remotely accessed digital thermostats controlling supermarket refrigerators, freezers, and chiller cabinets, overriding temperature settings and triggering defrost cycles. In some cases, temperatures rose from -27°C to above 50°C, forcing retailers to discard large quantities of perishable food. Some refrigeration units reportedly caught fire, triggering sprinkler systems and causing additional damage. France’s Foreign Affairs Ministry estimated the losses of food and other goods at tens of millions of euros.
French authorities traced the operation to Shahid Kaveh, a cyber warfare group affiliated with the IRGC. Paris prosecutor Laure Beccuau said investigators identified a modus operandi characteristic of the group, including the use of Farsi and IP addresses traced to devices in Iran. Her office has opened an investigation into the unit’s head, two deputies, and other individuals who may have been involved, on charges including organized cyberattacks carried out on behalf of a foreign power.
Barrot said Iran’s ambassador had been summoned to receive a formal protest and that France would seek sanctions against those responsible at the European level.
The attacks come amid growing concerns about the exposure of essential services and civilian infrastructure to cyber operations. Similar refrigeration-system disruptions were subsequently reported in 11 European countries, including the UK, Belgium, Ireland, the Netherlands, and Sweden.