France blames Iran for cyberattack on supermarkets
Paris seeks European sanctions and opens criminal investigation into sabotage of refrigeration systems.
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
France says an Iranian cyber group was responsible for an attack on industrial refrigeration systems at hundreds of supermarkets. The government has summoned Iran’s ambassador and wants European sanctions against those responsible.
The French government announced the attribution on Monday following an investigation by the national cyber-security agency ANSSI, the intelligence services and other government organisations. According to Paris, the attack targeted controllers that operate refrigeration systems in supermarkets. Paris says the attack took place on 11 and 12 October, but the political response emerged on Monday.
France links the operation to Shahid Kaveh, an offensive cyber unit said to be connected to the electronic and cyber centre of Iran’s Revolutionary Guard. French authorities say the group has previously been involved in attacks on operational technology. This is a French accusation against Iran.
According to French cyber authorities, the settings of refrigeration systems were altered at around 700 shops. As a result, temperatures rose, food was lost and, according to ANSSI, fires broke out in at least 15 cases. French publications describe the attack as unprecedented in scale and aggressiveness, but do not report that all the damage can independently be attributed to the same group.
The Paris Public Prosecutor’s Office has opened a formal investigation into organised cybercrime, with the aggravating circumstance that the attack was allegedly carried out in the interests of a foreign power. Prosecutors are focusing on the group’s alleged leader and two deputies and want to seek international arrest warrants.
Foreign Minister Jean-Noël Barrot said France wanted to impose sanctions on those responsible at European level. It is not yet clear what measures the European Union will take or when a decision will be made. For Dutch supermarket chains and other companies, the case raises the question of how they secure industrial installations managed remotely.
The attack shows that digital sabotage is not limited to data theft or website outages. Refrigeration systems, energy installations and other operational technology can have direct consequences for physical processes. French authorities describe it as the first large-scale cyberattack on French soil that, in their view, was primarily aimed at sabotage. That is a French characterisation, not an independently established legal judgment.
Also show where in Europe and in the world
One story, several perspectives
What is established
- France has publicly attributed the attack to Iran.
- The attack involved industrial refrigeration systems at French supermarkets.
- France wants European sanctions and has opened a criminal investigation.
Left
Arguments Emphasises that vital infrastructure also requires public protection and joint European cyber-defence.
Values Collective security, public responsibility and the protection of workers and consumers.
Consequences Warns that companies cannot bear the cost of security alone and that European cooperation is needed.
Centre
Arguments Wants technical and legal evidence to be carefully assessed first, followed by a proportionate response through European procedures.
Values The rule of law, international cooperation and administrative restraint.
Consequences Emphasises that sanctions must be credible without unnecessarily increasing diplomatic escalation.
Right
Arguments Sees the attack as proof that critical infrastructure must be better protected and that perpetrators must be firmly deterred.
Values National security, resilience and corporate responsibility.
Consequences May argue for stricter security standards, greater oversight and higher costs for companies that fall short.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The key facts are based on French government sources and an independent AP report. The attribution to Iran is clearly presented as France’s claim.
- confirmed France attributes the attack to Shahid Kaveh, an Iranian cyber unit. — Mentioned in the French diplomatic statement and the CERT-FR report. source
- confirmed The attack affected refrigeration systems at around 700 supermarkets. — Reported by AP based on French authorities. source
- confirmed Fires broke out in at least 15 cases. — Mentioned in the ANSSI publication. source
Editor's note
The French attribution and the criminal investigation have been confirmed. Iran’s involvement is a conclusion reached by French authorities, not a fact established by a court.Sources
More on this in Dutch media
- Het Parool — „cyberaanval frankrijk”
- NRC — „cyberaanval frankrijk”
- Tweakers — „cyberaanval frankrijk”