France attributes supermarket refrigeration hacks to Iran, Digi Mart USA News (France): The hacking of French refrigeration installations now has an official attribution. On November 9, France blamed Iran for an operation that affected roughly 700 sites during the night of October 11 to 12.
The stakes went well beyond an IT outage: the attackers acted on how the cold equipment functioned.
The conclusions were made public a month after the incidents, following earlier incidents and a new wave reported in Europe. In its November 9 statement, the Ministry of Foreign Affairs attributed the cyberattacks to Iran, announced that the Iranian ambassador would be summoned, and said it intends to propose new European sanctions.
This public attribution is the key development, although it does not mean every refrigeration incident observed since October necessarily has the same origin.
According to the technical report from the Cyber Crisis Coordination Center (C4), published by CERT-FR, the compromise occurred during the night of October 11 to 12. The cold controllers at about 700 sites were affected; this figure refers to installations, not 700 individual refrigerators.
The defrost settings were modified to reach high temperatures, which distinguishes this operation from a simple website outage, since a computer system here controlled physical equipment.
The documented damage includes product losses and at least 15 fires. This does not mean that 15 supermarkets were entirely destroyed.
The affected sector is not limited to supermarkets and also includes butcher shops, a slaughterhouse and food-processing sites.
The C4 identifies the Islamic Revolutionary Guard Corps as the instigator and the Shahid Kaveh unit as the executing group. Its analysis links several technical and operational elements, including infrastructure used during reconnaissance and traces tied to the campaign.
The value of the document lies in separating investigators’ analysis from an online claim, since a hacker announcement taken alone would not establish state responsibility.
The economic consequences include lost food, with the ministry citing several tens of millions of euros in product losses. However, the documents reviewed do not establish theft of customer data, so the attack should not be presented as a leak of bank card or loyalty account information.
For operators, the case underscores that restarting equipment is not enough to explain or resolve a compromise. The attribution report is not a troubleshooting guide, and its conclusions do not guarantee that a restart, a new password or a single fix will resolve every case.
For consumers, the publication does not call for discarding groceries. The new development concerns the investigation and France’s diplomatic response, not a general alert for all fresh food departments in the country.
