The French government has officially accused Iran of orchestrating a sweeping cyberattack campaign that targeted supermarket freezers across the nation and wider Europe. The sophisticated digital assault, which took place in October 2026, manipulated commercial refrigeration units to spike internal temperatures to over 50 degrees Celsius. This malicious interference resulted in widespread food spoilage and even triggered multiple fires inside commercial grocery stores, marking a severe escalation in state-sponsored digital sabotage.
French authorities have laid direct blame for the incident at the feet of Iran's Islamic Revolutionary Guard Corps (IRGC). Jean-Noël Barrot, France’s Minister for Europe and Foreign Affairs, described the incident during a press briefing as an unprecedented operation in both its scale and level of aggressiveness. According to Barrot, this represents the first major cyber offensive campaign carried out purely for the purpose of physical sabotage on national territory, constituting a direct threat to the security of the French population and the nation's critical infrastructure.
Key takeaways
- More than 700 grocery stores across France and Europe were affected by the October 2026 cyberattacks.
- Refrigeration temperatures were maliciously hiked to over 50C, spoiling food and causing multiple fires.
- France's Ministry for Europe and Foreign Affairs blamed the IRGC and summoned the Iranian ambassador.
- Subsequent attacks targeted blood plasma reserves through medical supply vendor Coolworld, though averted quickly.
Scale of the Destruction and Impact on Major Retail Groups
The coordinated cyber assault severely impacted several major French supermarket operators, including the Casino, Leclerc, Coopérative U, Metro, Carrefour, and Intermarché groups. A comprehensive report published by France’s Cyber Crisis Coordination Centre estimated that direct food losses resulting from the temperature spikes reached tens of millions of euros. The sudden failure of hundreds of commercial cooling systems overwhelmed store management and forced emergency responses to contain localized electrical fires caused by the extreme thermal overload.
Following the initial grocery store strikes, a second wave of digital intrusions hit supermarkets in neighboring European countries just days later. The campaign then shifted targets to critical medical infrastructure. A third attack specifically aimed at Coolworld, a primary supply partner for the French Blood Establishment, sought to disrupt national blood plasma reserves. The EFS handles the vital collection, preparation, and distribution of blood and blood products used in essential medical operations and surgeries. Fortunately, operational disaster was averted because technical staff quickly identified the unauthorized temperature spikes and manually corrected them before serious clinical consequences materialized.
Broader Context of Iranian Cyber Activity and Diplomatic Fallout
Security analysts note that Iranian-affiliated hacking groups have steadily increased high-profile cyber operations against critical infrastructure globally. In August 2026, a UK power generation plant was forced offline for several days following a similar digital intrusion. During the exact same month, a coordinated cyber attack struck more than 30 municipal water utilities across Minnesota. French officials emphasized that this hostility is part of an ongoing pattern, citing previous destabilizing operations attributed to Tehran, including a 2023 cyberattack targeting the satirical weekly magazine Charlie Hebdo and disruptions surrounding the organization of the 2024 Paris Olympic Games.
In response to the grocery store and medical supply attacks, the French foreign ministry formally summoned the Iranian ambassador to Paris to lodge a strong diplomatic protest against what officials termed an extremely grave act. While Iranian media outlets have dismissed the sweeping allegations as baseless, the French government maintains that the attacks represent a dangerous new threshold in international cyber warfare, shifting from espionage and data exfiltration to direct physical destruction of civilian and commercial assets.
Comments