Declaration of attribution to Iran of cyber attacks against France

France condemns in the strongest terms the unacceptable cyber attacks against its interests on its territory conducted by the Islamic Republic of Iran.

In the night from 11 to 12 October, a campaign of cyber attacks targeted the supermarket refrigeration system controls of more than 700 retail sites in France. These cyber attacks caused significant material damage, sparking fires and spoiling foodstuffs estimated to be worth tens of millions of euros. They constitute a major breach of the interests of the nation and the security of the French people.

This campaign was unprecedented in its scale and level of aggressiveness and has been the first offensive cyber campaign carried out purely for the purposes of sabotage on French soil.

Following investigations, France is now in a position to attribute these destructive actions to Iran: they were carried out by SHAHID KAVEH, an offensive cyber unit affiliated with the Electronic Warfare and Cyber Defence Organization of the Islamic Revolutionary Guard Corps. This actor is a persistent threat to our critical infrastructure.

These cyber attacks are unjustifiable, inexcusable and contrary to international law. They are also contrary to the principles of the UN norms of responsible state behaviour in cyberspace, which the Islamic Republic of Iran has endorsed.

The Iranian cyber threat to French interests is nothing new. Iran has already carried out several destabilization acts against France, including against the weekly magazine Charlie Hebdo in 2023 and the organization of the Paris 2024 Olympic and Paralympic Games. In March 2026, the European Union adopted sanctions against the Iranian entity Emmenet Pasargad, which contributed to conducting these cyber attacks.

In accordance with its 2026 National Cybersecurity Strategy, France is determined to make use of all the means of response at its disposal, including within the European Union and alongside its European and international partners, in order to anticipate, prevent, deter and respond to destabilizing and destructive actions against it in cyber space.

As such, France is going to summon the Ambassador of the Islamic Republic of Iran in France in order to express its condemnation of these cyber attacks in the strongest terms.

France will propose to its European partners the adoption of further sanctions against Iranian entities and individuals involved in this cyber attack against it, as well as in other malicious cyber activities.

Lastly, France reserves the right to take any further steps, both publicly and non-publicly, that it deems necessary and proportionate in order to respond to these cyber attacks.

The technical services of the Cyber Crisis Coordination Centre (C4) – the National Cyber Security Agency (ANSSI), the Directorate-General for External Security (DGSE), the Directorate-General for Internal Security (DGSI), the Directorate-General of Armament and the Cyber Defence Command (COMCYBER) – are also publishing a joint report on the offensive cyber activities of the Iranian actors linked to the Islamic Revolutionary Guard Corps against French interests, drawing on C4 work to identify responsibility for cyber attacks.

Link to the ANSSI press release: