French government formally accuses Iranian military hackers of sabotaging 700 retail sites, spoiling millions in food. Part of wider pattern targeting critical infrastructure.
By Adam Makins·
France has formally accused Iran of launching a devastating cyberattack that targeted refrigeration systems across hundreds of retail locations in October. According to the French National Cybersecurity Agency (ANSSI), Iranian military hackers compromised cooling controllers at approximately 700 supermarkets, butcher shops, and other food retailers, deliberately raising temperatures during nighttime hours and destroying millions of dollars worth of perishable goods.
The attack extended beyond grocery stores. Several small hydroelectric power plants were also targeted, though the damage there was described as moderate. French Foreign Minister Jean-Noël Barrot characterized the campaign as unprecedented, calling it the first large-scale cyberattack aimed at sabotage on French national territory.
The refrigeration system attacks are hardly isolated incidents. Throughout 2024, similar cyberattacks have struck targets across Europe, Israel, and the United States. Swedish and Irish grocery stores experienced comparable attacks just last week. In France, a major blood bank had to scramble to save blood samples when their refrigeration systems were compromised, raising serious concerns about threats to lifesaving medical resources.
In Israel this spring, hackers claiming the name “Cyber Isnaad Front” targeted an industrial food processing plant, infecting corporate computers with malware, hijacking office printers to display threatening messages, and compromising security cameras for propaganda purposes. That video, released in early October, taunted French protesters and came suspiciously close to timing with the subsequent French supermarket attacks.
U.S. military commissaries faced similar disruptions over the summer when refrigeration failures caused widespread food spoilage overnight.
French investigators traced the attacks through digital infrastructure patterns, connections to propaganda outlets, and traces of Farsi language use within the attack code. The Paris Prosecutor’s Office has opened an investigation and is requesting international arrest warrants against members of Shahid Kaveh, an Iranian cyber unit linked to the Islamic Revolutionary Guard Corps (IRGC).
The attribution matters because it represents the first formal governmental blame assignment for this wave of destructive operations. While U.S. officials have privately suspected Iranian involvement in attacks on American military bases, the Pentagon has maintained official silence, refusing even to confirm the disruptions were cyberattacks at all.
Cybersecurity experts see a clear pattern. “Iran’s cyberattacks against refrigeration systems likely represents the IRGC attempting to reassert Iranian power abroad through both physically and psychologically disruptive operations,” explains Alex Orleans, head of threat intelligence at Sublime Security. Such tactics deliver tangible, cost-effective results while Iran’s national resources remain stretched across ongoing conflicts.
These attacks have exposed a critical weakness plaguing industrial systems worldwide. Operational technology, the machines controlling physical processes like water pumps and cooling systems, often runs on outdated hardware riddled with vulnerabilities. The problem is maddeningly difficult to solve because operators cannot simply shut down these systems for patching without disrupting essential services like healthcare and transportation.
Many of these machines sit exposed to the internet, often deliberately, because equipment vendors contractually require remote access for maintenance. This combination of old, vulnerable, exposed hardware creates a cybersecurity nightmare with no easy solution in sight.
The news of France’s formal accusation may embolden other nations to take similar action. During a G7 meeting in Paris, Secretary of State Marco Rubio was asked whether the U.S. shared intelligence contributing to the French attribution. While Rubio declined to comment directly, he acknowledged the “French are quite capable” and questioned why Iran would target infrastructure in nations uninvolved in direct conflict with Tehran.
Iran has not responded to the allegations. However, the pattern of escalating attacks, growing sophistication, and expanding geographic targeting suggests this threat will intensify before it diminishes. The question is whether nations will finally force their industries to secure critical infrastructure before the next attack hits something far more vital than a supermarket freezer.
Source: NPR
