France has now officially accused Iran of carrying out the massive cyberattack that crippled refrigeration systems across hundreds of supermarkets in October. What began as a seemingly bizarre incident involving refrigerators has become a matter of national security. French Foreign Minister Jean-Noël Barrot announced on November 9 that investigators had traced the sabotage to a cyber unit affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC). The attack affected approximately 700 supermarkets, destroyed enormous quantities of food, and caused tens of millions of euros in losses. Similar incidents have since appeared across Europe, including attempts to compromise refrigeration systems used to preserve blood supplies. The French government is now treating the original attack as an act of foreign sabotage, while European officials are preparing a coordinated response.
I have warned that cyberwarfare would eventually move beyond stealing passwords, financial records, and government secrets. We are now witnessing attacks on the infrastructure that keeps modern society functioning. The attackers did not need to destroy a supermarket or bomb a warehouse. They accessed computerized temperature controls and turned refrigeration equipment into a means of destroying the inventory it was supposed to protect. That is a significant development in the economic consequences of cyberwarfare.
During the October 11–12 attack, hackers remotely manipulated refrigeration controllers, pushing temperatures as high as 50°C (122°F), for approximately six hours. Major French supermarket chains, including Carrefour, Intermarché, Monoprix, and Coopérative U, were affected. At least 15 fires were reported in connection with the sabotage, and Intermarché alone reported losses running into tens of millions of euros.
French investigators identified the Shahid Kaveh cyber unit, also associated with the name CyberAv3ngers, as the suspected operator. Authorities cited Persian-language traces, internet addresses associated with Iran, and methods previously linked to the group. French prosecutors have sought international arrest warrants for the unit’s leadership and deputies. Barrot summoned Iran’s ambassador and announced that France would pursue European sanctions. Tehran has rejected the allegations as baseless and hostile.
The attacks did not remain confined to France. During the first days of November, refrigeration systems at supermarkets in Belgium, Luxembourg, the Netherlands, Ireland, Sweden, Estonia, Finland, and other European countries experienced similar disruptions. Italian authorities also reported incidents involving food-distribution businesses, including a catering company in Tuscany and a frozen-food producer in Emilia-Romagna. Italy’s national cybersecurity agency issued urgent warnings to the food industry and called for immediate protective measures. The Italian cases and the broader European incidents have not all been conclusively attributed to the same perpetrators. Nevertheless, the geographical spread demonstrates how a vulnerability in widely used industrial equipment can become a problem for an entire continent.
The attacks on blood bank refrigeration systems should concern everyone. French blood storage facilities were targeted by attempts to manipulate temperatures, but the French Blood Establishment reported that the attacks were stopped before blood products were spoiled. The attempted sabotage reveals the potential consequences. Blood, plasma, medicines, and certain medical materials require carefully controlled storage conditions. A compromised refrigeration system can threaten supplies that hospitals depend upon for emergency treatment, surgery, and routine care. We are discussing the vulnerability of essential medical infrastructure.
