🔍 Read the full analysis: France Says Iran’s Guards Targeted Fridge Systems In Supermarkets on ThorstenMeyerAI.com
Get business pricing on monitors, keyboards and dev gear
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
France says an IRGC cyber unit called Shahid Kaveh carried out an October attack that altered supermarket refrigeration settings at about 700 retail sites, causing substantial food losses and at least 15 fires. The government cited technical indicators, summoned Iran’s ambassador and plans to propose EU sanctions; Iran had not publicly responded by Monday evening, and the attribution has not been tested in court.
France on November 9 blamed an Iranian Revolutionary Guard cyber unit for an October attack that altered refrigeration settings at about 700 supermarket and retail sites, causing major food losses and at least 15 fires, according to French officials. The government named the unit Shahid Kaveh, summoned Iran’s ambassador and said it would propose new European Union sanctions; the attribution is France’s assessment, not a court finding.
The attack took place overnight on October 11–12, according to a report from France’s Cyber Crisis Coordination Centre, or C4, published alongside the attribution. The report says refrigeration controllers were accessed remotely and their defrost parameters changed to high temperatures. It records significant losses of goods and fires in at least 15 cases. France’s foreign ministry put total food losses at several tens of millions of euros. The Associated Press reported that temperatures reached 50°C for about six hours and that Intermarché alone reported losses of tens of millions of euros in one day.
France’s foreign ministry said it was “in a position to attribute” the destructive actions to Shahid Kaveh, which it described as affiliated with the IRGC’s electronic and cyber centre. Foreign Minister Jean-Noël Barrot also said at a G7 meeting in Paris, as quoted by AFP, that the attack was carried out by the IRGC. France’s five-page technical report cites a combination of indicators: shared attack infrastructure, use of the FOFA internet-scanning tool, a propaganda channel that relayed the attack, and traces of Farsi. The Paris prosecutor’s office also pointed to IP addresses linked to devices in Iran, according to the AP.
French authorities announced diplomatic, legal and policy responses. The Iranian ambassador was summoned, and France said it would propose new EU sanctions. Paris prosecutor Laure Beccuau opened a judicial investigation into the head of Shahid Kaveh, two deputies and any other people who may be identified. The prosecutor’s office is seeking international arrest warrants, the AP reported. An investigation and a request for warrants do not establish guilt; the allegations remain to be tested through legal proceedings.
France blames Iran-linked unit for supermarket attack
France says a cyber unit altered refrigeration settings at retail sites, causing food losses and fires. The attribution is a government assessment, not a court finding.
What happened
France’s C4 report says refrigeration controllers were accessed remotely overnight on October 11–12.
Management interfaces on refrigeration equipment were exposed to the internet.
Defrost parameters were changed to high temperatures.
Officials reported major food losses and at least 15 fires.
Why France names Shahid Kaveh
French officials attribute the operation to a unit they describe as affiliated with the IRGC’s electronic and cyber centre.
Shared attack systems
France cites shared infrastructure among its technical indicators.
FOFA scanning
The report cites use of the FOFA internet-scanning tool.
Farsi traces
Investigators also cite traces of Farsi and a channel that relayed the attack.
What happens next
France has announced diplomatic, legal and policy steps; their outcomes remain uncertain.
- Summoned Iran’s ambassador.
- Plans to propose new EU sanctions.
- Paris prosecutors opened an investigation and are seeking international arrest warrants.
- No court has determined guilt.
- Iran had not publicly responded by Monday evening.
- No timetable or outcome was given for sanctions or the legal process.
The Cost of Exposed Cold-Chain Controls
The attack linked a remote change to industrial control equipment with immediate disruption to food retail: damaged or spoiled stock, business losses and reported fires. Supermarket refrigeration is a practical example of how network-connected building systems can affect essential day-to-day operations, even when the target is not a power grid or other nationally critical infrastructure.
France’s response also carries diplomatic weight. Paris has publicly assigned responsibility to an Iranian military-linked unit and is seeking EU sanctions, while pursuing suspects through a criminal investigation. The accusations could add to tensions between France and Iran, but the available material does not establish how other governments or the EU will respond, or whether the evidence will lead to arrests or prosecutions.
Products Worth Considering
LG UltraGear 32GX850A-B 32-inch 4K UHD OLED Gaming Monitor
LG UltraGear 25G590B-B 25-Inch Full HD 1000Hz Gaming Monitor
Apple AirPods Pro 3 Wireless Earbuds with Active Noise Cancellation
As an affiliate, we earn on qualifying purchases.
The Warning About Internet-Exposed Controllers
France’s cyber emergency response team had warned in October that management interfaces on the affected controllers were exposed to the internet, contrary to good practice. That warning points to a security weakness in the equipment’s accessibility; it does not, by itself, identify who exploited it. The subsequent C4 report sets out the government’s technical basis for linking the incident to Shahid Kaveh.
France’s report also attributes other operations against French targets since 2020 to a separate IRGC unit, Shahid Shoostari, including an attack on the Charlie Hebdo website in 2023 and an attempt to hijack video display screens during the Paris 2024 Olympics. Those claims are part of the wider French assessment, but the supermarket incident is attributed to Shahid Kaveh, not Shahid Shoostari.
“I can confirm that this attack was carried out by the Islamic Revolutionary Guard Corps (IRGC) of the Islamic Republic of Iran.”
— French Foreign Minister Jean-Noël Barrot, quoted by AFP
What the Attribution Does Not Establish
France has published a set of technical indicators, but those indicators are an intelligence and government attribution, not a judicial finding. The Paris investigation is ongoing, and no court has determined whether the named suspects directed or carried out the attack. Iran had not publicly responded by Monday evening, according to The Record.
Several details remain unsettled in the information provided: the precise number and identity of affected retail operators, the full accounting of losses and damage, and whether the reported fires were directly caused by the altered settings in every instance. The material also does not say whether international arrest warrants have been issued, how EU members will consider France’s sanctions proposal, or whether investigators have identified additional suspects.
Sanctions Proposal and Criminal Inquiry
The next steps identified by France are the EU sanctions proposal and the Paris prosecutor’s investigation, including the request for international arrest warrants for the unit’s head and two deputies. No timetable or outcome for either process was given in the source material. Further technical findings, a response from Iran, or developments in the investigation could clarify the evidence and the legal consequences.
For retailers and other organisations with connected building equipment, the French warning makes the exposure of management interfaces a practical issue to review. The published material does not specify additional protective measures or say whether the affected systems have since been secured, so the status of remediation remains unknown.
Key Questions
What happened to the supermarket refrigeration systems?
France’s C4 report says attackers accessed refrigeration controllers overnight on October 11–12 and changed defrost settings to high temperatures. Officials reported significant food losses and at least 15 fires.
Who does France say was responsible?
France attributes the attack to Shahid Kaveh, a cyber unit it says is affiliated with the Islamic Revolutionary Guard Corps. This is France’s official attribution, not a court ruling.
What evidence did France cite?
The French technical report cites shared attack infrastructure, use of the FOFA scanning tool, a propaganda channel that relayed the attack and traces of Farsi. The Paris prosecutor’s office also cited IP addresses linked to devices in Iran, according to the AP.
How large were the losses?
France’s foreign ministry described total food losses as several tens of millions of euros. The AP reported that Intermarché alone reported losses of tens of millions of euros in one day; the full total and accounting remain unclear.
What happens next?
France says it will propose new EU sanctions, while the Paris prosecutor’s investigation continues and the office seeks international arrest warrants. The source material gives no timetable for the EU decision or the legal process.
Source: ThorstenMeyerAI.com
