France Blames Iranian Cyber Unit for Widespread Supermarket Sabotage

France has formally accused Iran of executing a nationwide cyberattack on supermarket refrigeration systems that caused widespread food spoilage across retail stores. French Foreign Minister Jean-Noël Barrot stated on Monday that the sabotage was directed by elements associated with Iran's Islamic Revolutionary Guard Corps. The foreign minister characterized the operation as the first large-scale cyberattack aimed at economic sabotage on French territory.

The Paris prosecutor's office opened a formal investigation into the head of the IRGC-affiliated cyber unit Shahid Kaveh and two of his deputies. According to Paris Prosecutor Laure Beccuau, the specialized unit operates under the direction of the Guard Corps' electronic and cyber center. The intrusion targeted management software produced by the Danish engineering firm Danfoss, which allows supermarket operators to monitor and regulate cooling systems remotely.

The attack forced temperatures inside affected commercial freezers and display cases up to 50 degrees Celsius overnight, resulting in food losses estimated in the millions of euros. Supermarket group Coopérative U reported system disruptions at over 100 locations, while Intermarché and its subsidiary brand Netto registered breaches at 180 stores. Other major European retailers, including Carrefour, Monoprix, and E.Leclerc, were also affected by the compromised software.

Following the findings, French authorities summoned the Iranian ambassador to Paris to deliver a formal protest over the breach. Minister Barrot announced that France is coordinating with European Union partners to establish sanctions targeting the cyber unit involved. Similar refrigeration system breaches were subsequently detected at retail locations in Belgium, Luxembourg, Sweden, the Netherlands, Estonia, Finland, and Ireland, while authorities in the United States are investigating earlier cooling failures at domestic military sites.

French officials have not made public the specific forensic evidence used to link the Iranian hacking group to the infrastructure intrusion. Iran's diplomatic mission and foreign ministry have not released an official statement regarding the French allegations. French authorities stated that further defensive measures are being prepared to secure national logistics and retail networks.

Written by Martina Kirchner martina.kirchner@alpineweekly.com