France opens probe into Iranian cyber unit over supermarket fridge attacks

French authorities have launched a formal investigation into a cyber unit linked to Iran’s Islamic Revolutionary Guard Corps (IRGC) following a series of attacks on supermarket refrigeration systems. The attacks, which occurred on October 11 and 12, caused temperatures in fridges and freezers across hundreds of supermarkets in France to rise significantly. This disruption resulted in the spoilage of fresh and frozen food, with the estimated value of the lost inventory reaching millions of euros. In some cases, supermarket operators were forced to discard entire inventories of perishable goods due to the failure of the cooling systems.

Background

The incident has been described by French Foreign Minister Jean-Noël Barrot as an act of unprecedented scale and aggression. Speaking on the sidelines of the G7 foreign ministers' meeting in Paris, Barrot confirmed that the attacks were carried out by the IRGC, specifically identifying a cyber unit known as Shahid Kaveh. The Paris prosecutor’s office has opened an investigation into this unit, which is described as a shadowy component of Iran's ideological army. The cyber-attack involved taking control of digital thermostats to push temperatures up to above 50 degrees Celsius, effectively disabling the refrigeration capabilities of the affected stores. Barrot stated that this event marks the first large-scale cyber-attack aimed at sabotage on French national territory, constituting a major violation of the nation's interests and the security of its people.

In response to the attribution of blame, the French government summoned the Iranian ambassador to Paris to lodge a strong protest against what was described as an extremely grave act. The minister further indicated that France intends to implement sanctions at the European level against those responsible for the attacks. While the primary impact was felt in France, reports indicate that dozens of supermarkets in several other European countries were also affected by a similar cyber-attack targeting fridges and freezers the previous week. However, it remains unclear whether these incidents in other nations are directly linked to the attacks in France.

Why it matters

The attribution of these attacks to a state-sponsored military unit represents a significant escalation in cyber-conflict involving European infrastructure. The financial impact on the retail sector is substantial, with millions of euros in perishable goods lost. Beyond the economic cost, the incident has raised serious concerns regarding the security of critical infrastructure and the supply chain for food in France. The French government has framed the event as a direct threat to national security, emphasizing that the attacks were not merely a technical glitch but a deliberate act of sabotage. The involvement of the IRGC suggests a strategic intent to disrupt daily life and commercial operations in France, prompting a coordinated diplomatic and legal response from Paris and its European partners.

What happens next

The Paris prosecutor’s office is currently conducting an investigation into the Shahid Kaveh cyber unit. Concurrently, French authorities are working with European counterparts to formulate and impose sanctions against the responsible parties. The diplomatic channel has already been activated through the summoning of the Iranian ambassador. As the investigation proceeds, the focus will likely remain on gathering evidence to support the sanctions package and to determine if the attacks in other European countries share the same origin.