France threatens European action against Iran over supermarket cyberattacks

France is seeking European-level action against Iran after blaming the Islamic Revolutionary Guard Corps for cyberattacks that disrupted supermarket refrigeration systems in October. Foreign Minister Jean-Noël Barrot said the Iranian ambassador would be summoned and that Paris would pursue sanctions at European level. He added that France ruled out nothing in its response and would take measures it considered proportionate and necessary to deter further attacks.

Barrot said the cyberattacks on hundreds of supermarkets on 11 and 12 October were unprecedented in scale and aggression. According to French officials, the operation raised temperatures in fridges, forcing stores to discard perishable food. The Paris prosecutor has also opened an investigation into Shahid Kaveh, described as a shadowy cyber unit linked to the IRGC, and has requested international arrest warrants for two of its officials.

The case matters because it involves alleged sabotage of physical commercial infrastructure rather than data theft alone. French officials have framed it as the first large-scale cyber sabotage on French territory, and they say similar incidents have since been reported in other European countries. That has increased the diplomatic significance of the case, with Paris now pressing for a broader European response rather than treating it only as a domestic criminal matter.

The allegations also place a named Iranian military body at the centre of a wider dispute over cyber operations and state responsibility. France has linked the incident to the IRGC's role in offensive cyber activity, while the prosecutor's office is pursuing the case through the judicial system. The combination of sanctions pressure and criminal investigation suggests French authorities are treating the matter as both a security issue and a legal one.

What remains unclear is how the supermarket systems were accessed and whether the later incidents reported in other European countries are connected to the October attacks in France. It is also not yet clear what specific European measures France will seek or how other governments will respond. The investigation is continuing, and further official findings are likely to shape both the legal case and the diplomatic response.

French authorities have publicly attributed last month's supermarket refrigeration cyberattacks to Iran's Islamic Revolutionary Guard Corps, saying the operation affected 700 sites across the country. Foreign Minister Jean-Noël Barrot said the attacks on 11 and 12 October were carried out by the IRGC and described them as unprecedented in scale and aggression. He said France would pursue sanctions at European level against those responsible.

The Paris prosecutor has also opened an investigation into Shahid Kaveh, described by French cyber monitoring agencies as a shadowy unit linked to the IRGC and better known online as CyberAveng3rs. Officials said the unit had claimed attacks in the past through that name. Barrot made the comments on the sidelines of the G7 foreign ministers' meeting in Paris, underscoring the diplomatic weight of the case.

The reported disruption went beyond a routine cyber incident because it targeted physical infrastructure used to regulate refrigeration temperatures in supermarkets. French officials said the attacks raised temperatures in fridges and, in some cases, forced stores to throw away perishable food. They said the case marked the first large-scale cyber sabotage on French territory and a major attack on the nation's interests and the security of the French people.

As an Amazon Associate we earn from qualifying purchases.

The allegations also matter because they place a named Iranian military body at the centre of a cross-border cyber dispute between Europe and Tehran. France's move to seek sanctions and open a judicial investigation suggests the case is being treated as both a criminal matter and a state security issue. It also comes at a time when European officials have been warning about the risk of cyberattacks and other forms of sabotage affecting critical services and commercial systems.

The French response follows earlier reporting that similar incidents were seen in other European countries, although officials have not said those cases are directly linked. The latest French statement is more specific than previous accounts, identifying the IRGC as the actor behind the October attacks and naming the unit under investigation. That makes the case one of the clearest public attributions yet in a developing European cyber dispute.

What remains unclear is how the supermarket systems were accessed, whether the same group was responsible for related incidents elsewhere in Europe, and what sanctions France will seek at EU level. The prosecutor's investigation is continuing, and further official findings will determine whether the case leads to additional legal or diplomatic action. For now, the incident stands as a significant test of how European governments respond to alleged state-linked sabotage of civilian infrastructure.

French authorities have accused Iran's Islamic Revolutionary Guard Corps of being behind cyber-attacks that raised the temperatures of supermarket fridges and freezers across the country last month. Foreign Minister Jean-Noël Barrot said the incident affected hundreds of supermarkets and described it as unprecedented in both scale and aggression. He said those responsible would face sanctions, while the government summoned the Iranian ambassador to Paris to lodge a strong protest.

The Paris prosecutor said an investigation had been opened into the head of an offensive cyber unit associated with the IRGC, along with two deputies. Laure Beccuau named the unit as Shahid Kaveh, which she said was affiliated with the IRGC's electronic and cyber centre. French officials said the hacking led to the destruction of tons of frozen and chilled food, and in some stores temperatures reportedly rose as high as 50C.

The case is significant because it involved interference with physical infrastructure rather than data theft alone. Officials said more than 100 of one supermarket group's stores were hit, along with 180 stores from another chain, after hackers gained control of software regulating refrigeration temperatures on 11 October. The disruption affected food supplies and added commercial losses to the technical breach, while French authorities said they would take any necessary and proportionate measures to deter a repeat.

The allegations also carry wider diplomatic weight because they place a named Iranian military body at the centre of a cross-border cyber dispute. France has said the attack marks the first large-scale cyber-attack aimed at sabotage on its national territory and a major attack on the nation's interests and the security of the French people. The move to seek sanctions and open a judicial investigation suggests the matter is being treated as both a criminal case and a state security issue.

The reported attack in France was followed by a similar incident against supermarkets in several other European countries, although it is not known whether the cases are linked. French officials have said the second wave may point to a broader pattern, but they have not established a direct connection. Iran has not issued an official response, while some Iranian media outlets have dismissed the allegations as baseless.

What remains unclear is how the systems were accessed, whether the same group was responsible for the later incidents elsewhere in Europe, and whether further targets were affected. The investigation in France is continuing, and the diplomatic response is still developing. Further official findings will determine whether the case leads to sanctions, arrests or wider European action.

France has publicly accused Iran's Islamic Revolutionary Guard Corps of carrying out cyberattacks that remotely raised the temperatures of refrigeration units in supermarkets across Europe. Foreign Minister Jean-Noël Barrot said the hacks on 11 and 12 October were carried out by the IRGC and described them as unprecedented in scale and aggression. He also said France would push for European sanctions against those responsible.

The latest details indicate the disruption went beyond French stores. French officials said a second wave of hacking this month affected more than 100 establishments across Europe, and that refrigerators used by French blood banks were also hit, forcing staff to move some blood into other cold storage units. French prosecutors have now announced a judicial investigation into the head of the Iranian group Shahid Kaveh, described as an offensive cyber unit linked to the IRGC's Electronic and Cyber Center, along with two deputies and any other individuals identified.

The case is significant because it involves interference with physical infrastructure rather than data theft alone. Supermarket refrigeration systems are part of the digital control environment used by retailers, and the reported attacks caused stores to pull produce from shelves and, in some cases, close temporarily. The reported impact on blood-bank refrigeration also raises the stakes, because it touches a sensitive part of the health supply chain.

France's response suggests the matter is being treated as both a criminal and diplomatic issue. Barrot said the Iranian ambassador had been summoned, while prosecutors moved to open a formal probe. Iran's mission to the United Nations did not respond to requests for comment, and Iran routinely denies carrying out malicious cyber operations.

The allegations also fit into a wider pattern of concern about state-linked cyber activity in Europe. The attacks were described as straightforward in method but unusual in their repetition across multiple countries, which prompted speculation about who might be responsible. Officials and analysts have also been watching for signs of sabotage campaigns in Europe more broadly, including incidents that have not yet been formally attributed.

What remains unclear is whether the second wave of fridge attacks is directly connected to the October incidents in France, and whether the same group was responsible for both. It is also not yet known how the systems were accessed or whether other European retailers and institutions were targeted in the same way. The investigation and the push for sanctions are continuing, and further official findings will determine how far the case extends beyond France.

France has accused Iran of being behind cyberattacks that raised the temperatures of refrigeration units in supermarkets across the country last month. The incident affected hundreds of stores and led to fires and food waste, according to French officials. Foreign Minister Jean-Noel Barrot said the attacks were carried out by the Islamic Revolutionary Guard Corps, or IRGC, and described them as unprecedented in scale and aggression.

Barrot said the Iranian ambassador had been summoned and that France would seek sanctions at European level against those responsible. He made the comments after a G7 ministerial meeting in Paris, while saying the investigation was still under way. The Paris prosecutor also said it had requested international arrest warrants for the leader of Shahid Kaveh, an offensive cyber unit linked to the IRGC, and for his two deputies.

Officials said the attacks targeted refrigeration units across more than 700 French retailers. Stores belonging to Carrefour, Monoprix, Intermarche and Cooperative U were among those affected, with attackers said to have manually overridden fridge temperatures. The disruption spoiled fresh and frozen food estimated to be worth millions of euros, adding a commercial cost to the technical breach.

The case matters because it moves beyond data theft or online disruption into interference with physical infrastructure used by everyday consumers. Supermarket refrigeration systems are part of the wider digital control environment that retailers increasingly rely on, and the incident shows how cyber operations can create immediate economic damage without striking traditional state targets. France's decision to pursue sanctions and arrest warrants also suggests the matter is being treated as a security and diplomatic issue, not only a criminal investigation.

The French allegations also place the IRGC at the centre of a new dispute with European implications. The IRGC is a powerful branch of Iran's armed forces and has long been linked by Western governments to external operations, including cyber activity. By naming a specific unit and seeking warrants against its leadership, French authorities are signalling that they want to identify individual responsibility rather than treat the incident as an anonymous hack.

The reported attacks last month were not limited to France. French media reports said dozens of supermarkets across seven other European countries were also affected by a separate cyberattack targeting fridges and freezers, although it is not known whether the incidents are linked. That uncertainty leaves open the question of whether the French case is part of a broader campaign or a distinct operation with similar methods.

For now, the main unanswered questions are who exactly carried out the attacks, how they gained access to the refrigeration systems, and whether other European retailers were targeted by the same group. The investigation in France is continuing, and the diplomatic response is still developing. What happens next will depend on whether the warrants are acted on, whether European sanctions are agreed, and whether investigators can establish a direct operational link to the IRGC unit named by prosecutors.

#France #Iran #IRGC #cyberattack #supermarkets