🔍 Read the full analysis: France Presents Evidence For Its Supermarket Fridge Hacking Allegation on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
France attributed an October attack on supermarket refrigeration systems to Shahid Kaveh, a cyber unit it says is affiliated with Iran’s Revolutionary Guard. Authorities cite technical indicators and have opened a judicial investigation, but the attribution has not been tested in court and Iran had not publicly responded by Monday evening.
France on November 9 attributed an overnight October cyberattack on supermarket refrigeration systems to Shahid Kaveh, a unit the government says is affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC). French officials say the attack affected more than 700 retail sites, caused major food losses and led to at least 15 fires; Iran had not publicly responded by Monday evening, according to The Record.
France’s Cyber Crisis Coordination Centre (C4) published a five-page technical report through the national computer emergency response team, CERT-FR. It says attackers accessed refrigeration controllers during the night of October 11–12 and changed their defrost settings to high temperatures. The report describes “significant losses of goods and, in at least 15 cases, fires.” The foreign ministry put the number of affected retail sites at more than 700; the C4 report described controllers at about 700 sites.
The evidence France disclosed consists of several indicators rather than a single conclusive finding: shared attack infrastructure, use of a scanning tool the report associates with the group, coverage of the attack by a propaganda outlet linked to Shahid Kaveh, and traces of Farsi. The Paris prosecutor’s office cited Farsi use and IP addresses linked to devices in Iran, according to the Associated Press. The French technical report also says related infrastructure was used to scan Schneider Electric equipment used in smaller energy and water production units.
France has taken diplomatic and legal steps following the attribution. The Iranian ambassador was summoned, and the government said it would propose new European Union sanctions. Paris prosecutor Laure Beccuau opened a judicial investigation involving the alleged unit head, two deputies and other possible suspects. The prosecutor’s office is seeking international arrest warrants, the AP reported. Those steps reflect an accusation and an active investigation, not a court finding of guilt.
France’s supermarket attack claim and the evidence behind it
France blames an Iran-linked cyber unit for an October attack on supermarket refrigeration systems. The evidence supports an active investigation, while the attribution remains untested in court.
How the attack caused damage
France says attackers changed refrigeration controllers’ defrost settings to high temperatures.
Attackers accessed refrigeration controls overnight.
Defrost settings were changed to high temperatures.
France reported major food losses and at least 15 fires.
What France cites
The attribution draws on several technical and contextual indicators.
Shared attack systems
France says the operation used infrastructure linked to the group.
Scanning activity
The report associates a scanning tool with Shahid Kaveh.
Farsi traces
The prosecutor’s office also cited Farsi use and IP addresses linked to devices in Iran.
Propaganda outlet
A channel linked to Shahid Kaveh covered the attack.
What the case means for operators
Connected building controls can create physical and financial consequences when compromised.
- Food losses across hundreds of retail sites
- At least 15 fires reported
- France estimated losses at several tens of millions of euros
- Review remote access to refrigeration controls
- CERT-FR warned that management interfaces were exposed to the internet
- Check whether similar weaknesses remain at other sites
Investigation and response
France has taken diplomatic and legal steps as the case proceeds.
Costs for Retailers and Cybersecurity
The incident shows how a cyberattack on building and refrigeration controls can create immediate physical and financial consequences, even without targeting payment systems or customer data. If defrost settings are changed, stores can lose stock and face fires, according to the French report. The foreign ministry described food losses as several tens of millions of euros; the AP reported that Intermarché alone said its losses reached tens of millions of euros in one day.
For businesses, the French response also puts attention on the security of connected equipment that may be managed remotely. CERT-FR had warned in October that the affected controllers’ management interfaces were exposed to the internet, which it described as contrary to good practice. The case may shape European diplomatic measures as well as how operators review access to refrigeration and other industrial systems. France’s attribution, however, remains the government’s assessment and has not been tested in court.
Products Worth Considering
LG UltraGear 27-inch QHD OLED Gaming Monitor, 240Hz
LG UltraGear 25G590B-B 25-Inch Full HD 1000Hz Gaming Monitor
DJI Mini 4 Pro Fly More Combo Drone with DJI RC 2
As an affiliate, we earn on qualifying purchases.
Warnings Before the October Attack
The attack took place on October 11–12, and France’s computer emergency team issued a warning in October about internet-exposed management interfaces on the affected controllers. France published its attribution and the C4 report on November 9, after roughly four weeks of investigation. The government’s declaration named Shahid Kaveh and described it as part of the IRGC’s electronic and cyber centre.
French officials also linked a separate set of earlier operations to another IRGC unit, Shahid Shoostari. The C4 report attributes operations against France dating back to 2020 to that unit, including a 2023 attack on the Charlie Hebdo website and an attempt to hijack video display screens during the Paris 2024 Olympics. These are separate claims from the supermarket refrigeration case, which France attributed to Shahid Kaveh.
““I can confirm that this attack was carried out by the Islamic Revolutionary Guard Corps (IRGC) of the Islamic Republic of Iran.””
— French Foreign Minister Jean-Noël Barrot, quoted by AFP
Attribution Still Faces Legal Tests
France has published indicators supporting its attribution, but the material described so far is a bundle of technical and contextual clues, not a judicial determination. The report does not make public a single definitive piece of evidence establishing who directly operated the systems. The prosecutor’s investigation is ongoing, and its allegations have not been tested in court.
Iran had not publicly responded by Monday evening, according to The Record. The available source material does not establish whether the suspects are in custody, whether the requested international warrants have been issued, or what response the proposed EU sanctions will receive. The exact total value of losses across all affected retailers is also not specified beyond the foreign ministry’s estimate of several tens of millions of euros.
Investigation and EU Response Ahead
The Paris judicial investigation will examine the allegations against the alleged unit head, two deputies and any other people identified during the inquiry. The prosecutor’s office is seeking international arrest warrants, but the status and timing of those requests have not been reported in the source material. Investigators may also seek to corroborate the technical indicators and clarify how the attackers accessed the controllers.
France has said it will propose new EU sanctions; the measures, timetable and level of support from other member states remain unknown. Retailers and equipment operators will also face questions about how internet-facing control interfaces were protected and whether similar weaknesses remain in other sites. No further official response from Iran was reported by Monday evening.
Key Questions
What happened to the supermarket refrigeration systems?
France says attackers changed the defrost settings on refrigeration controllers overnight on October 11–12, causing major food losses and at least 15 fires.
Who does France blame for the attack?
France attributes the operation to Shahid Kaveh, a cyber unit it says is affiliated with Iran’s Islamic Revolutionary Guard Corps. This remains France’s attribution, not a court finding.
What evidence has France cited?
The French report cites shared attack infrastructure, use of a scanning tool associated with the group, a propaganda channel that relayed the attack, and traces of Farsi. The Paris prosecutor’s office also cited IP addresses linked to devices in Iran.
How many sites and how much damage were reported?
The foreign ministry said more than 700 retail sites were affected, while the C4 report described about 700. France’s foreign ministry estimated food losses at several tens of millions of euros, and the report said at least 15 fires occurred.
What happens next?
The Paris prosecutor’s judicial investigation continues, with the office seeking international arrest warrants. France also plans to propose new EU sanctions, though their timing and prospects are not yet clear.
Source: ThorstenMeyerAI.com
