The French government has accused Iran of launching a massive cyberattack on hundreds of supermarkets across France in October. The attack targeted the refrigeration systems of approximately 700 stores, causing significant disruptions and financial losses. The French Foreign Minister, Jean-Noël Barrot, announced on November 9, 2026, that Paris would take retaliatory measures against Tehran, including seeking European sanctions.
The cyberattack occurred on the night of October 11-12, 2026, and affected the remote regulation systems of refrigeration units in major supermarket chains, including Carrefour, Intermarché, Monoprix, and Système U. Hackers took control of internet-connected equipment from manufacturers Danfoss and Dixell, manipulating automated defrosting cycles to raise temperatures to abnormal levels. Some installations reached temperatures as high as 50 degrees Celsius.
The consequences of the attack were severe, with large quantities of fresh and frozen products having to be destroyed to prevent health risks. The attack also caused around 20 fires in affected equipment. Investigations revealed that outdated versions of refrigeration management software, containing vulnerabilities, were exploited to facilitate remote intrusion.
French authorities have opened a judicial investigation into a cyber unit affiliated with the Iranian Revolutionary Guard Corps (IRGC). The investigation targets the head of the Shahid Kaveh group, a cyber offensive unit linked to the IRGC's Electronic and Cyber Center, and two of his deputies. The use of the Persian language and IP addresses tracing back to Iran were identified as key evidence.
The French justice system has requested international arrest warrants for the three suspects. According to the Paris prosecutor, Laure Beccuau, the suspects' modus operandi matches that of the Shahid Kaveh unit. The French government is seeking to hold Iran accountable for the attack, which has heightened tensions between the two nations.
The incident occurs amidst a backdrop of escalating tensions between Iran and Western countries, marked by increased cyber operations and allegations of digital interference. French Foreign Minister Jean-Noël Barrot has summoned the Iranian ambassador to France and is pushing for European sanctions against Tehran.
The Iranian authorities have not yet commented on the allegations. The French government's response underscores the growing concern over state-sponsored cyberattacks and the need for international cooperation to combat such threats.
Key points
- France seeks international arrest warrants for three Iranian nationals linked to a cyber unit affiliated with the Iranian Revolutionary Guard Corps.
- The cyberattack caused significant disruptions to 700 French supermarkets, resulting in substantial financial losses and health risks.
- The incident has heightened tensions between France and Iran, with Paris pushing for European sanctions against Tehran.
