French Foreign Minister Jean-Noël Barrot. Photo: Aurore Martignoni / European Union, 2024, CC BY 4.0.
France has formally accused Iran's Revolutionary Guard Corps of carrying out the cyberattack that disabled refrigeration systems in hundreds of supermarkets across the country last month, and on Tuesday summoned Iran's ambassador to Paris as it vowed a tough response, including European sanctions and measures it may not disclose publicly.
French Foreign Minister Jean-Noël Barrot said the October 11–12 attack was "unprecedented in both its scale and its level of aggression" and described it as a major attack on the nation's interests and the security of the French people. He announced the attribution on Monday, on the sidelines of a meeting of G7 foreign ministers in Paris.
What happened on October 11 and 12
Hackers took control of refrigeration software used by French supermarket chains overnight on October 11–12, remotely raising temperatures inside fridges and freezers to 50 degrees Celsius (122 degrees Fahrenheit). Around 700 of France's roughly 10,000 supermarkets reported problems, with major chains including E-Leclerc, Intermarché, Carrefour, Monoprix and Coopérative U all hit. Tons of perishable food spoiled, and the attacks caused fires in some stores. French officials said the damage ran into tens of millions of euros.
Investigators say the attackers used Farsi and internet addresses linked to devices in Iran. The refrigeration systems were managed remotely through software supplied by Danish engineering firm Danfoss, according to reports.
How France traced the attack to Iran
In a joint report by French intelligence and cyber agencies, officials attributed the campaign to Shahid Kaveh, described as an offensive cyber unit affiliated with the Islamic Revolutionary Guard Corps' Electronic and Cyber Centre. The report named three alleged associates — Hamid Reza Lashgarian, Mahdi Lashgarian and Reza Salarvand — and said the hackers operated through front groups posing as vigilante hackers, including "CyberAveng3rs" and "Cyber Isnaad Front."
Paris prosecutor Laure Beccuau said on Monday she had opened a formal judicial investigation into suspected organised cybercrime committed in the interests of a foreign power, and requested international arrest warrants for the head of Shahid Kaveh and his two deputies.
France has not published the intelligence behind its attribution, and the allegations have not been tested in court. Iran has not formally responded to the accusation.
Sanctions and a warning of more to come
Barrot said France would seek sanctions at the European level against everyone responsible for the attack. On Tuesday, Iran's ambassador was received by the French foreign ministry's secretary-general, and Barrot told France Info television that Paris would "rule nothing out" in its response, including measures it may not disclose publicly.
"We will take all measures — including those we may not disclose publicly — that we deem proportionate and necessary to deter any further attacks," Barrot said.
Washington backs Paris as the Iran conflict widens
US Secretary of State Marco Rubio condemned the Revolutionary Guard Corps over the attacks, adding his voice to a growing Western backlash. The supermarket hacks were among the most disruptive cyberattacks since the war between the United States and Iran began in February, a conflict marked by scattered episodes of suspected digital sabotage.
The attribution lands as diplomacy around the Iran war continues: Qatar's prime minister briefed European officials on Iran talks this week, while President Donald Trump has said new US strikes on Iran are not necessary for now as long as negotiations progress. France's accusation adds a new front to the conflict — a cyber campaign reaching deep into everyday life in Europe — and raises pressure on the European Union to act against Tehran.
Sources: Reuters, Associated Press, Al Jazeera.