France Accuses Iran of Sabotaging Refrigeration Systems in 700 Supermarkets

The French government has accused Iran of sabotaging the refrigeration systems of approximately 700 supermarkets, resulting in significant losses and fires. On November 9, 2026, French authorities attributed the attack, which occurred on October 11-12, to two cyber-offensive units of the Islamic Revolutionary Guard Corps (IRGC): Shahid Shoostari and Shahid Kaveh. The French cybersecurity agency, CERT-FR, published a report implicating these units in the attack.

According to the report, Shahid Kaveh executed the operation, which targeted industrial refrigeration controllers, causing widespread disruptions. The attack is considered unprecedented in its scope and level of aggression. The report also notes that this is not an isolated incident, as Iran has been linked to various cyberattacks against French interests since 2020, including attacks on Charlie Hebdo in 2023 and a French video display company in 2024.

The investigation, conducted by the French cybersecurity agency and other government agencies, found technical evidence pointing to Iranian involvement, including the use of Farsi language in the attack infrastructure. Additionally, the propaganda outlet CyberbanNews, associated with Shahid Kaveh, promoted the operation on October 13. Shahid Kaveh has been linked to previous cyberattacks, including massive reconnaissance operations against Schneider Electric systems in April 2026.

Shahid Kaveh operates under various identities, including "CyberAv3ngers," a name already known to US authorities. In response to these findings, the US has sanctioned six individuals associated with the IRGC's cyber center, including Hamid Reza Lashgarian, the center's director. The French government has also taken steps to respond to the attack, with Foreign Minister Jean-Noël Barrot condemning the incident as "an attack of unprecedented scope and aggressiveness."

The French government has announced plans to take sanctions at the European level against those responsible for the attack. The Paris prosecutor's office has opened a judicial investigation targeting the head of Shahid Kaveh, his two deputies, and any other individuals identified. International arrest warrants have been requested. The French government has also summoned the Iranian ambassador to protest the incident.

The CERT-FR report highlights the evolving nature of cyber threats and the need for continued cooperation between governments and industries to prevent such attacks. The report also notes that Shahid Kaveh has developed scripts capable of controlling equipment from Siemens and Rockwell since June 2024. The French government has emphasized its commitment to protecting its critical infrastructure from cyber threats.

The incident has raised concerns about the vulnerability of critical infrastructure to cyberattacks and the need for increased vigilance and cooperation between governments and industries. The French government's response to the attack demonstrates its commitment to holding those responsible accountable and protecting its national interests.

Key points

• France attributes the sabotage of 700 supermarket refrigeration systems to Iran's Islamic Revolutionary Guard Corps.
• The attack is considered unprecedented in its scope and level of aggression.
• France plans to take sanctions at the European level against those responsible for the attack.