France is accusing an Iranian Revolutionary Guard cyber unit of crossing a dangerous new line: remotely sabotaging refrigeration systems at roughly 700 supermarket and retail sites until food spoiled and equipment caught fire.
This was not a data breach. It was a cyberattack with physical consequences inside ordinary stores where families buy their groceries.
In a formal announcement released Monday, France’s Foreign Ministry said the October operation caused major equipment damage, food losses worth tens of millions of euros and multiple fires. Paris called it the first large-scale cyber campaign on French soil conducted purely for sabotage.
The ministry said more than 700 large-retail sites were affected and described the attack as a direct threat to French national interests and public safety. It also connected the episode to a broader pattern of hostile Iranian cyber activity targeting French interests since 2020.
France said the Iranian ambassador would be summoned, new European sanctions would be proposed and additional responses could follow without being announced publicly. That is unusually blunt language for a cyber case—and a sign that Paris views this as an attack on the country rather than a private-sector outage.
The attack unfolded during the night of October 11 into October 12. According to France’s joint cyber-crisis report, the intruders took control of internet-connected refrigeration controllers and changed defrost settings to dangerously high temperatures.
The result was immediate and expensive. Refrigerators and freezers heated up, alarms were reportedly disabled, stores discarded fresh and frozen food, and at least 15 fires broke out.
The Associated Press reported that temperatures in some systems reached 122 degrees for about six hours. Roughly 700 of France’s 10,000 supermarkets were affected, while employees hauled ruined meat, ice cream and other food into disposal containers.
One major supermarket chain estimated losses in the tens of millions of euros in a single day. The physical damage made the episode different from the familiar ransomware attack that locks files and demands money.
The wire service also reported that French blood banks later faced attempts to drive refrigeration temperatures dangerously high, though workers protected the blood supply before products were lost. Stores in Sweden, Belgium, Luxembourg, Ireland and Estonia reported separate refrigeration problems in early November.
Those later incidents remain under investigation and have not been publicly tied to the same Iranian unit. The distinction matters because a shared target or method does not, by itself, prove a shared attacker.
French investigators say the operation was carried out by Shahid Kaveh, a cyber-offensive unit affiliated with the electronic and cyber arm of Iran’s Islamic Revolutionary Guard Corps.
The CERT-FR and C4 report says investigators tied the campaign to infrastructure, tools and operating patterns associated with Shahid Kaveh. The investigation also found traces of the Persian language and links to devices located in Iran.
Most of the known victims were supermarkets, but the damage spread further into the food supply chain. French authorities said small butcher shops, a slaughterhouse and food-processing facilities were also affected.
The attackers even targeted equipment at small hydroelectric sites, although officials described the effects there as limited.
That matters because it shows how the same weak point can connect a keyboard thousands of miles away to machinery that controls food safety, energy and other essentials in the real world.
France is responding on several fronts. The Iranian ambassador was summoned, Paris said it would seek European Union sanctions, and prosecutors opened a criminal investigation into sabotage committed in service of a foreign power.
The Paris prosecutor’s office is seeking international arrest warrants for the alleged head of Shahid Kaveh, two deputies and any additional suspects identified during the investigation.
The Record reported that the same IRGC-linked ecosystem has previously been connected to attacks on industrial controllers, including systems used by American water utilities. French investigators also identified infrastructure, tooling and Persian-language traces that matched earlier Shahid Kaveh activity.
The attack appears to have relied less on exotic capabilities than on exposed remote-management systems and weak security around industrial devices. That is the uncomfortable part: equipment designed for convenience and maintenance can become an entry point when it is reachable from the public internet.
The outlet also reported that France is seeking arrest warrants for three alleged Shahid Kaveh leaders. The public case now combines technical evidence, criminal proceedings, diplomatic pressure and a proposed European sanctions response.
A second wave of refrigeration incidents later hit stores in several European countries, along with French blood-storage facilities. French officials have not publicly tied that later wave to Shahid Kaveh.
Even without a public finding on the second wave, the warning from the October attack is already clear.
For years, Americans were told to think of cyberwar as stolen passwords, leaked emails and frozen computer screens. France says Iran has now demonstrated something far more alarming: a hostile actor can reach through an exposed controller, destroy food, start fires and disrupt critical services without ever setting foot inside the country.
The battlefield is no longer somewhere far away. It may be sitting in the back room of the neighborhood grocery store.
This is a Guest Post from our friends over at WLTReport. View the original article here.
The post France Says Iran Hacked 700 Supermarket Sites — Then Refrigeration Systems Caught Fire appeared first on 100PercentFedUp.com.
Continue reading...
[H/T 100PercentFedUp]