TFD Monitoring Desk
PARIS: France has accused Iran's Islamic Revolutionary Guard Corps (IRGC) of orchestrating a large-scale cyberattack that disrupted refrigeration systems at approximately 700 supermarkets across the country, causing substantial food losses and damage to equipment, while Tehran has strongly rejected the allegations and warned against retaliatory measures.
French Foreign Minister Jean-Noël Barrot described the October incident as an unprecedented act of cyber sabotage targeting civilian infrastructure, announcing that Paris would seek sanctions against those responsible through the European Union.
The diplomatic confrontation intensified after French authorities summoned Iran's ambassador to register their protest over the alleged cyber operation, which affected supermarket refrigerators and freezers by remotely manipulating their temperature-control systems.
According to reporting by CNN, the attack involved hackers gaining remote access to refrigeration equipment and activating defrost cycles, causing temperatures to rise beyond safe storage levels.
The resulting disruption forced affected retailers to discard significant quantities of fresh and frozen food. Some refrigeration equipment reportedly caught fire during the incident, raising additional concerns about the vulnerability of digitally connected industrial systems.
The attack, which occurred in October, has been described by French officials as one of the country's most serious cases of cyber sabotage involving commercial infrastructure.
France Points Finger at Revolutionary Guards
Speaking to journalists on Monday, Barrot said French investigators had established that the Islamic Revolutionary Guard Corps was responsible for the operation.
He characterised the incident as an exceptional threat to national security, arguing that the deliberate disruption of civilian food storage infrastructure represented a dangerous escalation in cyber hostilities.
The French foreign minister said the government intended to pursue punitive measures at the European level, although the precise nature and scope of the proposed sanctions have yet to be finalised.
When questioned about the evidence linking Iran to the attack, Barrot maintained that French authorities had reached a firm conclusion but declined to disclose sensitive details of the intelligence assessment.
French prosecutors have also opened a formal investigation into individuals allegedly associated with Shahid Kaveh, a cyber unit linked by French authorities to the IRGC.
The investigation reportedly targets the unit's leadership, two senior deputies and other individuals suspected of participating in the operation.
According to the Paris prosecutor's office, investigators identified technical indicators that they believe connect the cyberattack to Iran, including the use of the Farsi language and internet addresses associated with devices located in Iranian territory.
French authorities are seeking international arrest warrants against suspects identified in connection with the alleged operation.
However, the Iranian government's responsibility for the attack remains disputed, with Tehran rejecting the French findings.
Iran Rejects Allegations, Warns Against Retaliation
Iran's Foreign Ministry responded on Tuesday by strongly denying any involvement in the cyberattack, describing France's accusations as politically motivated and unsupported.
Tehran characterised the allegations as hostile and claimed they were intended to divert international attention from French policies towards Iran.
Iranian officials also warned that the country reserved the right to respond to any actions they considered unlawful or harmful to its national interests and security.
The competing statements have further strained relations between Paris and Tehran at a time of heightened regional tensions and continuing disagreements over security and diplomatic issues.
While France has expressed confidence in its attribution of the cyberattack, Iran's rejection underscores the difficulties involved in establishing internationally accepted responsibility for sophisticated cyber operations.
Cyberattack Exposes Vulnerability of Civilian Infrastructure
The incident has raised significant concerns about the security of industrial control systems connected to the internet, particularly those used in food storage, energy distribution, manufacturing and other essential commercial activities.
Unlike conventional cyberattacks aimed at stealing information or disrupting websites, the operation allegedly targeted physical equipment through digital manipulation.
By remotely altering refrigeration settings, attackers were reportedly able to interfere directly with temperature-sensitive storage facilities, causing financial losses and creating potential safety hazards.
The incident demonstrates how vulnerabilities in operational technology can be exploited to produce consequences beyond the digital environment.
Modern supermarkets increasingly depend on automated monitoring systems to regulate refrigeration equipment, reduce energy consumption and maintain food safety standards.
However, insufficiently protected remote-access systems can create opportunities for malicious actors to interfere with essential operations.
The reported fires involving refrigeration equipment have also highlighted the potential physical dangers associated with cyber intrusions into industrial systems.
Similar Incidents Reported Across Europe
French authorities are also examining whether similar disruptions reported elsewhere in Europe could be connected to the October attack.
Supermarkets and other businesses in Sweden, Belgium and Ireland reportedly experienced comparable incidents involving refrigeration systems earlier in November.
However, investigators have not conclusively established whether these attacks were coordinated or carried out by the same individuals.
The wider pattern has prompted concerns that industrial control systems used by commercial operators could become increasingly attractive targets for cyber sabotage.
Cybersecurity specialists have emphasised the importance of stronger access controls, network monitoring and protection of remote industrial equipment against unauthorised interference.
The incidents have also renewed debate over the preparedness of European businesses and governments to respond to cyber threats affecting critical supply chains.
Growing Cyber Tensions Amid Regional Conflict
The allegations against Iran come against a backdrop of heightened international tensions following military confrontations involving the United States, Israel and Iran earlier this year.
According to CNN, American intelligence agencies issued warnings to businesses and government institutions in March regarding the possibility of retaliatory cyber operations by groups associated with Iran.
Those advisories reflected concerns that geopolitical conflicts could increasingly extend into cyberspace, affecting civilian infrastructure and private-sector organisations far beyond traditional battlefields.
France's latest accusations could introduce another dimension to the already complicated relationship between European governments and Tehran.
Any European sanctions would require further diplomatic coordination and could affect broader efforts to manage tensions with Iran.
The French investigation is continuing, and authorities have indicated that additional evidence may emerge as inquiries progress.
For European governments, the incident highlights the increasing importance of protecting civilian infrastructure against sophisticated digital threats.
For Iran, the allegations represent another source of diplomatic pressure at a time when the country is already confronting international economic restrictions and regional security challenges.
The dispute also illustrates the difficulties facing governments seeking to deter cyberattacks while avoiding further escalation in an increasingly polarised international environment.
As Paris considers its next steps and Tehran maintains its denial, the case is likely to remain a significant test of European cybersecurity cooperation, diplomatic coordination and international accountability for alleged state-linked cyber operations.
Source attribution: This report has been independently rewritten, reorganised and expanded for The Financial Daily, based primarily on original reporting by CNN, including reporting by Issy Ronald and Pierre P. Bairin, and additional publicly reported findings from French authorities. The allegations against Iran are attributed to French officials and remain disputed by Tehran.
