France blames Iran's Revolutionary Guards for supermarket fridge cyberattacks

France has attributed the October cyberattacks on supermarket refrigeration systems to Iran's Islamic Revolutionary Guard Corps. Foreign Minister Jean-Noël Barrot made the accusation publicly, the BBC reported, and the Paris prosecutor's office has opened a formal investigation into the incident.

The attack itself was narrow in method and broad in reach. In mid-October, hackers gained control of the software that regulates temperature in refrigerators and freezers across hundreds of supermarkets throughout France. They then raised the temperature inside the cabinets. One affected retail chain reported levels as high as 50 degrees Celsius. The result was spoiled stock. The damage reached millions of euros.

Who carried out the attack and what do we know?

According to Barrot's statement, the operation traces back to the Islamic Revolutionary Guard Corps, the branch of Iran's armed forces that Western governments have repeatedly linked to offensive cyber operations. The Paris prosecutor's office will now examine the technical evidence, the chain of intrusion and the attribution claims before any charges can follow.

Attribution in cyber cases moves slowly. Investigators typically work from malware signatures, server infrastructure and intelligence-sharing with partner services. The minister's public naming of the Revolutionary Guards signals that French agencies believe the evidence is strong enough to state on the record.

What did the attack actually do to stores?

The hackers did not touch payment systems, tills or customer data, based on what has been disclosed. They targeted one specific layer of retail infrastructure: the software controlling cold-chain equipment.

The mechanics were simple and effective:

• Intrusion into temperature-regulation software for fridges and freezers
• Upward manipulation of set temperatures, reported at up to 50°C in one chain's cabinets
• Widespread product spoilage across hundreds of stores nationwide
• Losses estimated in the millions of euros

For grocers, the attack hit a blind spot. Refrigeration controls sit at the intersection of facilities management and IT, and many chains monitor them separately from core transaction systems. Spoiled perishables mean written-off stock, disrupted availability on shelf and, in fresh categories, lost sales that are difficult to recover.

Did the attacks spread beyond France?

Yes. Three weeks after the first wave in France, similar cyberattacks struck seven more European countries. The pattern — refrigeration software compromised, temperatures manipulated, perishable goods destroyed — repeated abroad, which points to the same toolset or the same operators.

The geographic spread raises the stakes for European food retailers as a class. If a single intrusion method works across borders, then every chain running similar refrigeration-management software shares the exposure. Cold-chain integrity, normally a food-safety and energy-cost issue, has become a cybersecurity question.

What happens next?

The Paris investigation will determine whether criminal proceedings follow. Politically, the attribution to the Revolutionary Guards opens the possibility of diplomatic or sanctions responses by France and its European partners, although no such measures have been announced so far.

For retailers, the incident is a stress test. Chains across Europe now face a concrete precedent: attackers can convert a facilities system into a weapon against stock, with damages in the millions of euros from a single coordinated campaign.