French authorities have launched a formal investigation into a state-linked cyber unit accused of orchestrating large-scale sabotage against supermarket refrigeration systems. Foreign Minister Jean-Noel Barrot confirmed that the attacks, which occurred on October 11 and 12 in France, were carried out by the Islamic Revolutionary Guard Corps (IRGC). Investigators identified the perpetrator as Shahid Kaveh, an offensive cyber unit operating under the Revolutionary Guards, and have requested international arrest warrants for its leader and two deputies. France has opened an investigation and accused Iran of being behind recent cyberattacks targeting refrigeration units in supermarkets.
The scale of the operation caused significant food waste and structural damage, with retailers reporting millions of euros in losses.
Investigators tracking the digital footprint determined that the hackers utilized Farsi language scripts and IP addresses linked to Iranian devices. By remotely accessing the refrigeration infrastructure, the perpetrators successfully forced temperatures up to 50 degrees Celsius (122 degrees Fahrenheit) overnight. This intense thermal spike resulted in spoiled inventory, damaged equipment, and in several instances, triggered electrical fires. The raised temperatures sparked fires or melted equipment, in some cases.
Several major French retailers reported widespread disruptions, including E-Leclerc, Intermarche, Carrefour, Monoprix, and Cooperative U. The impact was substantial: at least 300 Intermarche stores and its Netto brand were affected, alongside more than 100 Cooperative U locations and 80 Carrefour sites. Monoprix reported that roughly 5 percent of its 490 stores were targeted.
Foreign Minister Barrot characterized the incident as an unprecedented act of aggression, noting it is the first major cyberattack specifically designed for sabotage on French territory. During a statement, he emphasized that the breach constitutes a direct threat to national interests and the security of French citizens, vowing that the government would ensure the act does not go unanswered. France has already summoned the Iranian ambassador and is actively pushing for sanctions against Iran at a European level to deter further hostile activity.
The threat expanded beyond French borders on November 2, as supermarkets across other European nations reported identical cooling system failures. Affected countries now include Belgium, Estonia, Ireland, Luxembourg, and Sweden, where multiple retailers and a major food distribution hub faced similar overnight temperature manipulation. French officials reiterated their commitment to implementing any necessary public or private measures to safeguard infrastructure and respond to the ongoing threat. “We will also take any other measures that are proportionate and necessary, whether public or private, to respond to this attack and deter anyone who might seek to repeat it,” Barrot added.
