France blames Iran for hacking 700 retail fridges
Paris prosecutors seek international arrest warrants for an IRGC cyber unit after overnight temperature spikes spoiled food stock.
By Alina Campbell ·
French officials accused Iranian military hackers of sabotaging critical infrastructure across the country in October. The attack targeted refrigeration controllers at approximately 700 retail locations, including supermarkets and butcher shops.
According to the French National Cybersecurity Agency, ANSSI, the hackers raised temperatures in the middle of the night. This action spoiled millions of dollars worth of food. ANSSI also reported that several small hydroelectric power plants were targeted, resulting in moderate effects.
Foreign Minister Jean-Noël Barrot called the campaign unprecedented in scale and aggression. He stated that it marks the first large-scale cyberattack aimed at sabotage on French national territory. Barrot described the event as a major attack on the nation's interests and the security of its people.
The Paris Prosecutor's Office opened an investigation into the Iranian cyber unit Shahid Kaveh. French authorities link this unit to the Islamic Revolutionary Guard Corps. The prosecutor's office is requesting the issuance of international arrest warrants.
French investigators identified the hackers through specific digital clues. These clues included the digital infrastructure used by the attackers, a connection to a propaganda outlet, and traces of Farsi language use in the attack code.
This incident follows a trend of attacks on refrigeration systems in 2026. Similar hacks hit grocery stores in Sweden and Ireland last week. In the United States, food spoiled on military bases over the summer when refrigerator temperatures shot up overnight.
In Israel, hackers known as the Cyber Isnaad Front claimed responsibility for sabotaging an industrial food processing plant earlier this year. They infected corporate computers with malware and used office cameras for a propaganda video. That video included a taunt in French referencing local education protests.
Cybersecurity expert Alex Orleans of Sublime Security said the attacks fit Iranian strategy. Orleans noted that the IRGC is attempting to reassert power through disruptive operations. He pointed to previous cyberattacks on American water treatment plants in August as a similar pattern for the Shahid Kaveh unit.
Ari Ben Am of the Foundation for the Defense of Democracies described Shahid Kaveh as an offensive unit responsible for major Iranian cyber operations. He noted that a linked group, Cyber Av3ngers, was tied to attacks on Israeli-made systems in U.S. water facilities between 2023 and 2024.
Experts say securing operational technology remains difficult. These machines control physical processes and are often outdated. Operators cannot easily patch them without shutting down critical services. Many systems are also exposed to the open internet due to vendor contract requirements.
Iran has not yet responded to the accusations. Secretary of State Marco Rubio was asked about U.S. intelligence sharing during the G7 meeting in Paris on Monday. Rubio said he could not comment but noted the French are quite capable.
Rubio questioned why the attackers targeted refrigerators. He said France is not directly involved in the war between the U.S. and Iran, which began in February. He concluded that the news does not surprise Washington.
