France blames Iran for cyberattack on supermarket fridges, warns of consequences

PARIS  — France on Monday blamed Iran for last month’s massive cyberattack on supermarket fridges, summoned the Iranian ambassador, and said it would seek European Union sanctions against those responsible for the attack.

The October 12 attack sent refrigerator temperatures soaring, affecting about 700 of the country’s 10,000 supermarkets. In a statement Monday, prosecutors in Paris said they found that Iran’s elite paramilitary Islamic Revolutionary Guard Corps was behind the large-scale cyberattack.

The French Foreign Ministry condemned the attack “in the strongest possible terms.” French Foreign Minister Jean-Noël Barrot, speaking on the sidelines of G7 talks in Paris, said the Iranian ambassador was being summoned to “strongly protest against this extremely serious act.”

“This is an attack of unprecedented scale and aggressiveness,” Barrot said. “It is the first large-scale cyberattack aimed at sabotage on French soil, and it represents a major threat to our national interests and the security of the French people. That is why it will not go unanswered.”

“We will impose sanctions at the European level against all those responsible for this attack,” he added, vowing to take “any other measures needed” to respond to it and deter future attacks.

Paris prosecutor Laure Beccuau said in a statement that a formal judicial investigation was opened Monday into suspected organized cybercrime with the aggravating circumstance of the attack “having been committed to serve the interests of a foreign power — in this case, Iran.”

France’s national cybersecurity agency, ANSSI, attributed the attack to the Shahid Kaveh group, described as a “cyber unit” affiliated with the IRGC. The investigation targets the leader of the group as well as his two deputies and any other individuals who might be identified in connection with the case, Beccuau said.

IP addresses tied to Iran, attackers used Farsi — prosecutor

Investigators found that the attackers had used Farsi and IP addresses linked to devices located in Iran, Beccuau said. The Paris prosecutor’s office is seeking international arrest warrants, she said.

In the early hours of October 12, attackers remotely took control of refrigeration systems in hundreds of supermarkets and independent stores across France. Temperatures reached 50 degrees Celsius (122 degrees Fahrenheit) for about six hours, forcing stores to discard fresh and frozen goods. The Intermarché supermarket chain reported losses of “tens of millions of euros” in a single day.

Last week, another cyberattack in France on several blood banks tried to raise temperatures to extremely high levels, but was thwarted before it could do any damage to blood products or samples. France’s national cybersecurity agency and Paris prosecutors are investigating the incident.

Also last week, supermarkets in Sweden, Belgium, Luxembourg, Ireland, and Estonia were hit by problems with freezers and fridges that apparently were caused by cyberattacks, forcing some to dispose of ruined food.

The ANSSI agency said it was able to attribute some other cyberattacks carried out against France since 2020 to another group named Shahid Shoostari, also affiliated with the IRGC. They include attacks targeting the satirical newspaper Charlie Hebdo in 2023 and the organization of the Paris Olympic Games in 2024.