Iranian Hackers Spoil Food at 700 French Stores in Cyber Strike

The French government formally accused Iranian military hackers of launching a coordinated cyberattack against the country's critical infrastructure in October. The campaign targeted refrigeration controllers at approximately 700 retail locations, including supermarkets and butcher shops, forcing operators to turn up temperatures overnight and spoil large quantities of food. The state agency for cybersecurity, ANSSI, reported that the intruders also compromised several small hydroelectric power plants, causing moderate operational effects.

French Foreign Minister Jean-Noël Barrot described the operation as the first large-scale cyberattack aimed at sabotage on French national territory. He stated that the incident constitutes a major attack on the nation's interests and the security of the French people. The Paris Prosecutor's Office has opened an investigation into Shahid Kaveh, a cyber unit linked to Iran's Islamic Revolutionary Guard Corps. The prosecution office is requesting the issuance of international arrest warrants for the group.

ANSSI identified the hackers through digital clues, including specific infrastructure usage and traces of the Farsi language in the code. The agency noted that the attack was unprecedented in its scale and aggression. While the French government is the first to assign formal blame, similar disruptions have occurred across Europe, the United States, and Israel throughout 2026. Grocery stores in Sweden and Ireland experienced similar refrigeration failures last week, and employees at a major French blood bank had to manually save blood samples from heating up during a similar incident.

In the spring, a group calling itself the Cyber Isnaad Front claimed responsibility for sabotaging an industrial food processing plant in Israel. That attack included malware infections and the use of office cameras for a propaganda video. Over the summer, food spoiled in refrigerators at U.S. military base commissaries after overnight temperature spikes. The Pentagon has not officially confirmed a cyberattack as the cause, stating that the Department of War Office of the Inspector General does not discuss ongoing investigations.

Security experts say the attacks fit the known strategy of Iranian cyber units, which aim to reassert power through physically and psychologically disruptive operations. Alex Orleans, head of threat intelligence at Sublime Security, noted that Shahid Kaveh is repeating a pattern of targeting operational technology, such as the water treatment plants hit in August. Ari Ben Am, an adjunct fellow at the Foundation for the Defense of Democracies, described Shahid Kaveh as an offensive unit responsible for high-profile Iranian cyber operations. He linked the group to prior attacks on Israeli-made systems in U.S. water facilities and digital kiosks at the 2024 Paris Olympics.

The incidents expose a long-standing vulnerability in operational technology, the machines that control physical processes like cooling and water pumping. These systems are often outdated, difficult to patch without service disruptions, and frequently exposed to the open internet to allow for remote vendor maintenance. This combination creates a complex security challenge for operators in healthcare, transportation, and retail sectors.

Iran has not yet responded to the French accusations. During a G7 meeting in Paris on Monday, U.S. Secretary of State Marco Rubio declined to comment on information sharing with France regarding the attribution. He described the attackers as targeting refrigerators in countries not directly involved in the current conflict between the U.S. and Iran. Rubio concluded that the news did not surprise Washington, noting that France is capable of conducting its own analysis.

The formal accusation by France may prompt other affected nations to take similar steps. The wave of attacks on refrigeration systems has raised concerns about the physical impact of cyber intrusions on essential goods and public health infrastructure.