Iran's IRGC Weaponizes Supermarket Refrigerators in First Large-Scale Sabotage Cyberattack on French Soil

Iran remotely triggered defrost cycles in 700+ French supermarket fridges, destroying millions in perishable food. France demands EU sanctions and issues international arrest warrants for IRGC cyber operatives.

On October 11-12, Iran's Islamic Revolutionary Guard Corps cyber unit Shahid Kaveh remotely accessed refrigeration systems across more than 700 French supermarkets, initiating abnormal indefinite defrost cycles. The attack spoiled millions of euros worth of perishable food, triggered fires in some locations, and melted equipment. E-Leclerc, Intermarche, Carrefour, Monoprix, and Cooperative U were all hit. France now calls this the first large-scale cyberattack aimed at sabotage on its national territory.

Foreign Minister Jean-Noel Barrot summoned Iran's ambassador to Paris to lodge what he described as a "very strong protest." He explicitly attributed the operation to the IRGC and warned that France "rules nothing out" in its response, including undisclosed measures deemed "proportionate and necessary." Barrot announced France would push for European Union sanctions, framing the attack as one of "unprecedented scale and aggression." Paris prosecutor Laure Beccuau opened an investigation into Shahid Kaveh and requested international arrest warrants for two of its officials. The legal response is notable — naming a specific IRGC sub-unit and pursuing individual warrants represents an escalation beyond the usual diplomatic protests that follow state-sponsored cyber operations. The attack has already metastasized beyond France. On November 2, similar temperature spikes were recorded in stores across Belgium, Estonia, Ireland, Luxembourg, and Sweden, suggesting either a coordinated follow-on campaign or copycat exploitation of the same vulnerabilities. European air traffic has also been disrupted by false bomb alerts against dozens of flights, though attribution for those remains undetermined. The attack vector is what matters strategically. Industrial control systems in supermarket refrigeration — mundane infrastructure nobody thinks to harden — became a weapon. This is not espionage or data theft. It is physical sabotage delivered through software, targeting the food supply chain at its most fragile point: cold-chain integrity. The cost is not just spoiled food but the demonstration that civilian commercial infrastructure across an entire country can be degraded simultaneously. Jody Westby of Global Cyber Risk LLC told Al Jazeera that tracking the responsible group directly is "very difficult" because of poor cooperation on international cybercrime investigations — a problem she says has persisted for over 20 years with only marginal improvement. The nature of packet switching makes tracing origins inherently challenging, which is precisely why state actors favor this attack surface. The deeper question is deterrence. France is reaching for familiar tools — sanctions, arrest warrants, diplomatic protests — against an adversary that has already demonstrated willingness to cross the sabotage threshold against civilian infrastructure. If the response fails to impose meaningful costs, the signal to every state actor with offensive cyber capability is clear: commercial IoT systems across Europe are soft targets with no credible defensive perimeter.