French authorities have formally blamed an Iranian state-backed hacking group for a sophisticated wave of cyberattacks that crippled refrigeration systems at roughly 700 grocery stores across the country last month. The nationwide incidents, which began on October 11, disrupted food distribution sites and led to millions of euros in spoiled goods, according to statements from the French foreign minister and the Paris prosecutor's office. Officials state that the operation was orchestrated to serve foreign interests and specifically targeted automated infrastructure.
Investigators identified the primary offender as Shahid Kaveh, a cyber unit allegedly tied to the Electronic and Cyber Center of the Islamic Revolutionary Guard Corps. According to the Paris prosecutor's office, the group operated under various vigilante front names including CyberAveng3rs and Cyber Isnaad Front. A criminal investigation is currently underway for offenses involving fraudulent system interference and causing dangerous property damage. Furthermore, prosecutors have formally requested international arrest warrants for three Iranian officials named in a government report: Hamid Reza Lashgarian, Mahdi Lashgarian, and Reza Salarvand.
Key takeaways
- Cyberattacks sabotaged refrigeration systems at about 700 grocery stores in France starting October 11.
- French officials trace the operation to Shahid Kaveh, an Iranian cyber unit linked to the IRGC.
- Hackers manipulated defrost settings, destroying millions of euros in food and sparking at least 15 fires.
- Authorities requested international arrest warrants for three Iranian officials connected to the group.
Methods and Impact of the Infrastructure Attacks
The hackers achieved their objective by remotely manipulating refrigeration controllers at approximately 700 food distribution sites throughout France. By altering defrost settings to drastically raise temperatures, the malicious actors ruined extensive quantities of fresh produce and frozen inventory. French cybersecurity officials confirmed that the tampering caused at least 15 fires within the affected facilities. The French Foreign Ministry estimates that the total value of the destroyed food inventory reaches tens of millions of euros.
Beyond standard food distribution networks, the cyber operation extended to critical infrastructure components. France's cybersecurity agency reported that the threat actors also targeted equipment manufactured by Schneider Electric at several small hydroelectric facilities, though those specific intrusions yielded only limited operational effects. Additional attacks mirroring the French supermarket incidents subsequently emerged in other European nations, impacting grocery stores in Belgium, Estonia, Ireland, Luxembourg, and Sweden.
Broader Targets and Ongoing Investigations
The scope of the security incidents expanded on November 2, when refrigeration systems at three French blood-storage facilities were similarly targeted. Monitoring systems quickly alerted personnel, allowing staff to secure and relocate vulnerable plasma supplies before any actual damage or loss of blood products occurred. While European grocery stores experienced parallel digital disruptions in the weeks following the French supermarket attacks, authorities have not yet officially linked those regional events or the blood-facility intrusions to the Iranian operation.
Representatives from Iran have not yet acknowledged responsibility for the coordinated cyberattacks. As the criminal investigation progresses, French judicial authorities continue to push for international accountability while monitoring domestic infrastructure for further vulnerabilities.
Comments