- Lead. France has formally attributed a sweeping cyberattack on some 700 supermarkets to Iran’s Islamic Revolutionary Guard Corps, making it one of the first times a European government has publicly named Tehran for an attack on civilian food infrastructure.
- Fact. Hackers remotely raised refrigerator temperatures to 50°C (122°F) across chains including Carrefour, Intermarché and E.Leclerc on October 11–12, causing tens of millions of euros in food losses and triggering fires.
- Stake. France has summoned Iran’s ambassador and is pushing for new EU sanctions, adding a fresh diplomatic flashpoint to an already volatile US-Iran conflict.
French Foreign Minister Jean-Noël Barrot identified the IRGC cyber unit known as Shahid Kaveh as responsible for an October attack on French supermarket refrigeration systems that left retailers across the country counting losses in the tens of millions of euros. The Paris prosecutor’s office has sought international arrest warrants for the unit’s leader and two deputies.
How the Attack Unfolded
On the nights of October 11 and 12, attackers remotely overrode temperature controls in refrigeration units at roughly 700 stores, pushing temperatures as high as 50°C (122°F). Affected chains included E.Leclerc, Intermarché, Carrefour, Monoprix and Coopérative U. The simultaneous heating of cold-chain equipment caused perishable food stocks to spoil and started fires in several locations.
The scale of the operation — coordinated across competing retail groups on consecutive nights — pointed investigators toward a state-linked actor from early in the probe. French cybersecurity services connected the intrusions to Shahid Kaveh, an affiliate of the IRGC’s electronic and cyber centre. Iran has denied any involvement, calling the attribution “intended to divert public opinion from France’s destructive policies toward Iran.”
Diplomatic Fallout
Iran’s ambassador to Paris was summoned to the foreign ministry on Monday. Barrot said the government was “not ruling anything out” in its response and called for the European Union to impose new sanctions — including asset freezes and travel bans — against the individuals and entities held responsible.
A second wave of similar attacks struck supermarket chains in other European countries on November 2, though French authorities have not publicly linked that incident to the same hackers. Swedish chains Ica and Coop said they had no information that their refrigeration systems had been compromised in the later incidents.
Broader Context
The attack comes as France navigates competing pressures over the ongoing US-Iran conflict. Paris has sought to maintain a European voice in any eventual settlement while backing the US-led blockade on Iranian oil exports. The targeting of French civilian food infrastructure raises the domestic political cost of that position.
The case also highlights a gap in regulatory coverage: industrial control systems managing refrigeration, heating and similar infrastructure remain largely outside the cyber-incident reporting regimes that cover critical energy and finance networks.
As tensions over the Iran file ripple into European capitals, analysts note that Paris is not alone in adjusting its posture. Washington’s decision to freeze $4 billion in military aid to Israel has forced European governments to recalibrate their assumptions about how the conflict ends and what role they play in securing any deal.