France accuses Iran’s Revolutionary Guards of fridge cyber-attack

France has accused Iran’s Islamic Revolutionary Guard Corps of carrying out cyber-attacks that raised temperatures in supermarket fridges and freezers across the country in October, destroying tons of chilled and frozen food. Foreign Minister Jean-Noël Barrot called the attack “unprecedented in both its scale and its level of aggression”.

What happened to the supermarket fridges?

On 11 October, hackers gained control of the software that regulates the temperatures of the refrigeration units used in many French supermarkets. More than 100 Coopérative U stores were hit, along with 180 outlets of Intermarché and its Netto brand. In some stores, fridge temperatures reportedly rose to 50C (120F) overnight.

Carrefour, Monoprix and E.Leclerc were also affected. The operation targeted software supplied by Danish engineering firm Danfoss, which lets retailers manage cold units remotely.

How has France responded?

Jean-Noël Barrot said the operation “marks the first large-scale cyber-attack aimed at sabotage on our national territory, and it constitutes a major attack on the nation’s interests and the security of the French people”. He said Paris had summoned Iran’s ambassador to “lodge a very strong protest against this extremely grave act” and would take “any other necessary and proportionate measures” to “deter anyone who might seek to repeat it”.

Paris prosecutor Laure Beccuau said an investigation had been opened into the head of an offensive cyber unit associated with the IRGC, together with his two deputies. Beccuau named the unit as Shahid Kaveh, which she said is affiliated with the IRGC’s electronic and cyber centre. Shahid Kaveh is the name given to a cluster of hackers thought to be directly employed by the Iranian regime.

What has Iran said?

Iran has not responded officially, and some Iranian media outlets have dismissed the allegations as baseless. The French government has not said how it reached the conclusion that Iran was responsible; attribution of cyber-attacks is difficult because hackers can conceal their locations.

Where else were supermarket fridges attacked?

The French incident was followed by a similar attack on supermarkets in several other European countries, and it is not known whether the cases are linked. Earlier this month, a second wave hit more than 100 stores across Europe. Supermarkets in Belgium and Luxembourg were affected, along with a smaller number of shops in Sweden, Ireland, the Netherlands, Estonia and Finland.

Separately, in August a small number of US military bases had fridges malfunction, spoiling food. Reuters reported, citing sources familiar with the matter, that the incident is also being investigated as a deliberate cyber-attack.

Russian-aligned hacktivist groups claimed they were responsible on Wednesday, but few believed them.

Is the attack part of Iran’s wider strategy?

In recent weeks, commentators and politicians in Iran have argued that the country should extend any retaliation beyond the Middle East if the US and Israel resume the war they started earlier this year. If the IRGC carried out the cyber-attacks, it remains unclear whether they formed part of Iran’s deterrence strategy. In Israel, Herzog has tasked Eisenkot with forming the next government.

Frequently asked questions

Did Iran carry out the supermarket fridge cyber-attacks in France?

France’s foreign minister, Jean-Noël Barrot, accused Iran’s Islamic Revolutionary Guard Corps of the attacks. Iran has not responded officially, and some Iranian media outlets have called the allegations baseless; Paris has not said how it reached its conclusion.

How many supermarkets were affected by the fridge hacking?

More than 100 Coopérative U stores and 180 Intermarché and Netto outlets were hit, along with Carrefour, Monoprix and E.Leclerc stores. In some shops, fridge temperatures reportedly reached 50C (120F) overnight.

What is Shahid Kaveh?

Shahid Kaveh is the name the Paris prosecutor, Laure Beccuau, gave to an offensive cyber unit said to be affiliated with the IRGC’s electronic and cyber centre. She said an investigation was opened into the unit’s head and his two deputies.

Which other countries reported attacks on supermarket refrigeration?

A second wave in early November hit more than 100 stores across Europe, with supermarkets in Belgium and Luxembourg affected and smaller numbers of shops in Sweden, Ireland, the Netherlands, Estonia and Finland.

With reporting from BBC News.

Stock image, not from the events described. Globe World — Jo%E3o%20Silas / Wikimedia Commons (CC0 1.0)