France Accuses Iran of Hacking Supermarket Refrigerators in Major Cyberattack

France has formally accused Iran’s Islamic Revolutionary Guard Corps of carrying out a series of cyberattacks targeting supermarket refrigeration systems across the country in October, escalating tensions between Paris and Tehran.

French Foreign Minister Jean-Noël Barrot made the announcement on Monday, November 9, 2026, describing the incident as an unprecedented act of digital sabotage against French national interests and public security.

The attacks affected hundreds of supermarket locations, with French authorities reporting that approximately 700 stores were targeted. Hackers reportedly gained remote access to refrigeration equipment and manipulated temperature settings, putting fresh and frozen food supplies at risk.

The incident affected major retail operators, including Carrefour, Intermarché, Monoprix and Coopérative U.

Hackers Manipulated Refrigeration Systems

According to investigators, the attackers accessed refrigeration systems remotely through online interfaces and triggered abnormal defrosting cycles that caused temperatures inside refrigerators and freezers to rise.

In some locations, temperatures reportedly reached approximately 50 degrees Celsius, forcing supermarkets to dispose of large quantities of perishable products.

The cyberattack also reportedly caused around 20 fires involving refrigeration equipment, increasing concerns about the potential physical consequences of attacks on internet-connected industrial systems.

One supermarket operator, Intermarché, reportedly suffered losses worth tens of millions of euros in a single day as a result of the disruption.

Investigators believe weaknesses in outdated refrigeration control software may have made the systems vulnerable to remote interference.

France Links Attack to Iran's Revolutionary Guards

The Paris prosecutor's office has opened a judicial investigation targeting the alleged leader of an Iranian cyber unit known as Shahid Kaveh, two of his deputies and other individuals who may be identified during the investigation.

Prosecutors say the unit is affiliated with the Electronic and Cyber Centre of Iran's Islamic Revolutionary Guard Corps.

According to the investigation, forensic findings included the use of the Persian language and internet protocol addresses associated with devices located in Iran. Authorities say the attack methods were consistent with the suspected unit's operations.

The investigation covers alleged offences including organised cybercrime, fraudulent interference with automated data-processing systems and damage caused through methods considered dangerous to people.

French prosecutors have also requested international arrest warrants for individuals suspected of involvement.

However, the allegations remain subject to the ongoing judicial investigation, and the evidence has not yet been tested in court.

Paris Summons Iranian Ambassador, Threatens European Sanctions

Following the announcement, France summoned Iran's ambassador to formally protest what it described as a serious attack on national interests.

Foreign Minister Barrot also announced that Paris would pursue sanctions at the European level against those responsible.

He warned that France could take additional measures considered necessary and proportionate to prevent similar incidents from happening again.

The accusations come amid wider tensions between France and Iran, with the latest cyber incident adding another dimension to the diplomatic dispute.

Iran had not issued an immediate response to the latest allegations at the time of reporting.

Cybersecurity Concerns Extend Beyond France

The incident has raised wider concerns about the vulnerability of industrial equipment connected to the internet.

Similar disruptions involving supermarket refrigeration systems have been reported in other European countries, including Belgium, Luxembourg and Sweden. However, authorities have not established that all the incidents were carried out by the same group.

A separate wave of attacks reported in early November also affected refrigeration equipment in several European countries, while some cold-storage systems used by French blood banks were targeted. Investigators have not confirmed that these incidents were connected to the October attacks.

Cybersecurity experts have warned that outdated software, exposed remote-access systems and inadequate security controls can allow hackers to interfere with equipment designed to operate essential services.

The incidents have renewed calls for businesses to strengthen network security, update industrial control software and restrict remote access to sensitive equipment.

A Warning About the Risks of Digital Sabotage

France's accusation against Iran highlights how cyberattacks can move beyond traditional targets such as government websites, financial institutions and telecommunications networks to affect everyday services and essential supply chains.

By manipulating supermarket refrigeration systems, attackers can potentially cause food shortages, financial losses and physical safety risks without directly attacking the products themselves.

As the French investigation continues, the case could have significant implications for European cybersecurity policy and diplomatic relations with Tehran.

For businesses operating critical infrastructure, the incident is a reminder that even seemingly ordinary equipment can become a target in an increasingly complex digital security environment.