A digital breach became a physical supply-chain emergency.
PARIS
France has accused a cyber unit affiliated with Iran’s Islamic Revolutionary Guard Corps of orchestrating a coordinated attack against refrigeration systems at approximately 700 retail locations, causing fires, destroying food inventories and generating losses estimated at tens of millions of euros. The attribution represents a significant escalation in cybersecurity tensions between Paris and Tehran, demonstrating how digital intrusions can produce tangible damage to essential commercial infrastructure.
French Foreign Minister Jean-Noël Barrot announced the findings on November 9 following a G7 ministerial meeting in Paris. He identified Shahid Kaveh, a cyber-offensive unit linked to the Iranian Revolutionary Guards, as responsible for the attacks carried out during the night of October 11 and 12.
According to France’s national cybersecurity agency, ANSSI, the attackers compromised industrial refrigeration controllers and altered temperature settings, disrupting equipment used to preserve perishable goods. Some systems reportedly reached temperatures of 50 degrees Celsius for several hours, forcing businesses to discard substantial quantities of refrigerated and frozen products.
The operation affected major retail networks, including Carrefour, Intermarché, Coopérative U, Casino, Leclerc and Metro. Authorities also identified smaller food businesses among the victims, illustrating the vulnerability of interconnected commercial infrastructure.
The consequences extended beyond financial losses. French cybersecurity officials reported at least 15 outbreaks of fire associated with compromised equipment, transforming what began as unauthorized digital access into a potential physical safety emergency.
Investigators also identified attempted interference with equipment at smaller hydroelectric installations. Although the reported effects were limited, the findings broadened concerns about the targeting of industrial control systems across different economic sectors.
The French government’s attribution rests on technical evidence gathered by its Cyber Crisis Coordination Centre, which brings together cybersecurity specialists, intelligence agencies and military authorities. Officials cited attack infrastructure, distinctive software tools, communications associated with the suspected group and traces of Persian-language activity.
These findings support the French government’s formal attribution, although the judicial investigation remains ongoing. The Paris prosecutor’s office has opened proceedings concerning suspected organized cybercrime committed in the interests of a foreign power and is pursuing international arrest warrants.
Paris also announced plans to summon Iran’s ambassador and seek additional European sanctions against individuals and entities linked to the operation. Those measures remain part of the diplomatic response rather than completed judicial findings.
The incident raises a broader concern for international businesses. Refrigeration systems, manufacturing equipment and logistics networks increasingly depend on digital connectivity, creating operational efficiencies while exposing physical processes to cybersecurity risks.
Unlike conventional data breaches, attacks against industrial controls can directly compromise products, interrupt supply chains and threaten public safety. Financial damage may continue accumulating even after unauthorized access has been contained.
For retailers, the episode underscores the importance of industrial cybersecurity, independent safety mechanisms, operational monitoring and coordinated incident-response procedures. For governments, it demonstrates how suspected state-linked cyber operations can affect civilian economic activity without targeting traditional military infrastructure.
France’s allegations will now test the effectiveness of international cooperation, diplomatic accountability and legal mechanisms designed to address cross-border digital sabotage.
The larger lesson extends beyond the immediate confrontation between France and Iran: protecting the digital systems that govern essential physical infrastructure has become inseparable from economic security and public safety.
Beyond the Headlines, Accountability Matters.