France Blames Iranian IRGC‑Linked Cyber Unit for Attack on 700 Supermarkets’ Refrigeration Systems
France’s foreign ministry has formally attributed a major cyberattack on refrigeration systems in more than 700 supermarkets to Shahid Kaveh, an offensive cyber unit tied to Iran’s Islamic Revolutionary Guard Corps. The incident highlights how tensions with Tehran now extend into everyday commercial infrastructure far from any battlefield.
French authorities now say an Iranian military‑linked cyber unit was behind a disruptive supermarket attack last month. On 9 November, France’s foreign ministry formally attributed the large‑scale cyber incident that hit refrigeration systems in more than 700 supermarkets overnight from 11 to 12 October to the Shahid Kaveh offensive cyber unit. Shahid Kaveh is affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC).
By naming a specific IRGC‑linked unit, Paris has moved the incident into the realm of state responsibility. The ministry’s statement ties the attack directly to a foreign security structure rather than to unidentified criminal hackers.
According to the French account, the attackers targeted refrigeration systems in over 700 supermarkets on French territory. While the reporting does not list casualties, interference with cooling systems in that many stores threatens food supplies, creates waste, and disrupts routine shopping for large numbers of people.
The episode lands amid broader confrontation with Iran that is already dominated by sanctions and economic pressure. U.S. Secretary of State Marco Rubio has argued that the economic campaign against Iran is working and has said this pressure is strong enough that Trump does not need to launch extensive military operations. Iranian Foreign Minister Abbas Araghchi, in turn, has condemned what he calls U.S. military aggression and says only diplomacy and respect for Tehran’s sovereign demands can resolve the conflict.
French attribution of a supermarket cyberattack to an IRGC‑affiliated unit will likely feed debates in Europe over how to respond to Iranian cyber activity and how far to extend sanctions. It also fits into a wider pattern described by Western officials, who link Iran to proxy forces and asymmetric operations in several regions.
The direct impact of this case is felt at ground level. Store operators had to manage disrupted refrigeration systems across hundreds of locations. Consumers faced uncertainty about which products remained safe and which outlets were fully functioning.
Strategically, the incident shows how quickly disputes with Iran can affect civilian infrastructure far from the Middle East. If similar techniques were used against hospitals, transport networks, or other critical services, the disruption could spread well beyond the grocery sector.
The main signals to watch now are whether France proposes new EU sanctions or other measures aimed at Shahid Kaveh and its backers, and whether other European governments publicly align with Paris’s attribution. Any response from Tehran to the French statement would also clarify how Iran chooses to handle this accusation at the diplomatic level.
Sources
- OSINT