# France blames Iran’s IRGC for cyberattack that spoiled food at 700 sites

*Tuesday, November 10, 2026 at 10:06 AM UTC — Hamer Intelligence Services Desk*

**Published**: 2026-11-10T10:06:08.274Z (1h ago)
**Category**: cyber | **Region**: Europe
**Importance**: 9/10
**Sources**: OSINT
**Permalink**: https://hamerintel.com/data/articles/23053.md
**Source**: https://hamerintel.com/summaries

---

**Deck**: French authorities say Iran’s Islamic Revolutionary Guard Corps hijacked refrigeration controllers at about 700 retail sites, altered defrost settings and disabled temperature alerts, causing tens of millions of euros in food losses and some fires. The sabotage-style attack shows how everyday industrial systems can be turned into tools of disruption.

France has accused Iran’s Islamic Revolutionary Guard Corps (IRGC) of carrying out a cyber operation that sabotaged refrigeration systems at hundreds of retail locations, ruining stock and triggering fires in what Paris portrays as an attack on civilian infrastructure.

According to French statements summarized in cybersecurity reporting, attackers gained access to internet‑connected refrigeration controllers at around 700 retail sites. Once inside those systems, they changed defrost cycles and switched off temperature alarms, allowing units to warm up without staff being alerted. The result was tens of millions of euros in spoiled food and several fires caused by overheating equipment.

By explicitly naming the IRGC, France is treating the campaign as state-linked sabotage rather than ordinary cybercrime. That accusation from a major EU country adds to existing tensions over Iran’s behavior, including concerns about its nuclear program. Canadian Foreign Minister Anita Anand has said Iran’s repeated failure to cooperate with the International Atomic Energy Agency has heightened worries about its nuclear activities.

The direct victims in this case were retailers and their suppliers. Store operators were left with unusable stock, potential insurance disputes and the need to inspect or replace compromised equipment. For shoppers, the impact appears mostly indirect but real: disrupted supply, higher costs for operators that can feed through to prices, and questions about the safety and reliability of cold‑chain logistics.

Technically, the incident exposes how fragile many industrial control systems are once they are connected to the internet. Devices built to manage refrigeration in shops and warehouses were optimized for efficiency and remote monitoring, not for resisting a determined state adversary. Subtle manipulations—tweaking defrost settings, silencing alarms—can cause large financial losses without touching headline targets like banks or power grids.

The French case also lands amid broader concern about shrinking reaction times in cybersecurity. Mandiant, a major security company, reports that attackers now exploit software vulnerabilities a median of seven days before those flaws are publicly disclosed, while enterprises take an average of 20 days to apply patches. That 27‑day window gives well‑resourced actors opportunities to study and weaponize overlooked systems, including the kind of industrial controllers involved in the refrigeration attack.

The episode is a reminder that disrupting a society’s resilience can start with systems as mundane as supermarket freezers.

Key signals to watch now are whether the European Union follows France’s lead with coordinated measures tied to this operation, whether other countries report similar activity against their retail or cold‑chain networks, and how quickly regulators move to tighten security standards for connected industrial equipment.