France Blames Iran's IRGC for Cyberattack on 700 Supermarkets

The French government officially announced on the 9th (local time) that the cyberattack targeting refrigeration facilities at over 700 supermarkets across France last month was carried out by Iran’s Islamic Revolutionary Guard Corps (IRGC), which is engaged in a war with the U.S. and Israel. While Western circles had previously speculated that Russia was behind the attack, evidence has emerged indicating Iran as the perpetrator disrupting the food supply chain. Analysts suggest that Iran, which has effectively controlled the Strait of Hormuz and weakened the global energy market since the war began in February, is now showcasing its cyber warfare capabilities beyond conventional combat.

◇“Iranian hardliners behind France’s refrigerator attack”

French Foreign Minister Jean-Noel Barrot stated during a G7 foreign ministers’ meeting briefing at the foreign ministry in Paris, “We have confirmed that Iran was behind this destructive attack,” adding, “This unprecedented attack in scale and nature marks the first cyberattack targeting sabotage on French territory.” He continued, “We will impose sanctions on those responsible at the European level” and “We summoned the Iranian ambassador to France to strongly protest.” French authorities have publicly disclosed the names and faces of Hamid Reza Rashgarian, head of the IRGC’s electronic warfare division, Shahid Kaveh commander Mahdi Rashgarian, and Reza Salarband, and launched a full-scale investigation.

A cyberattack occurred on October 11–12, causing refrigeration temperatures at over 700 supermarkets operated by major distributors such as Carrefour, Leclerc, and Intermarché across France to rise above 50 degrees Celsius. At least 15 fires broke out, leading to massive food waste and damages amounting to tens of millions of euros. Europe, shocked by the unprecedented attack on its food supply chain, initiated a joint investigation led by the European Union (EU). Some speculated that Russia might have launched a “hybrid attack” targeting countries allied with Ukraine.

France’s intergovernmental Cyber Crisis Coordination Center identified the perpetrator in its report as the “Shahid Kaveh” unit, a cyber division under the IRGC, stating, “Circumstantial evidence is clear.” The techniques and equipment used in the attack matched those possessed by Shahid Kaveh, and traces of Persian language use were found in the hacking server network. Shahid Kaveh has claimed responsibility for cyberattacks on U.S. and Israeli industrial facilities since 2023, and its propaganda media widely publicized the success of this attack. They were also found to disguise their identity using names like “Cyber Avengers,” “Warriors of Solomon,” “Mister Soul,” and “Cyber Isnad Front.” EU High Representative for Foreign Affairs and Security Policy Kaja Kallas stated, “Our response must be very strong.”

The August incident involving freezer shutdowns at U.S. military bases is also suspected to be Iran’s doing. At the time, six large supermarkets in Army, Navy, and Air Force bases in Arizona, California, Wyoming, Mississippi, and Rhode Island reported freezer malfunctions, with temperatures spiking overnight, forcing the disposal of all contents. The U.S. Department of Defense has listed Iran as a suspect and is cooperating with French investigators.

The Iranian government has not issued a clear response to France’s accusation. However, the semi-official Mehr News Agency stated, “France’s claims are baseless and lack any evidence.”

◇Iran “Lifts ballistic missile range restrictions”

As Western countries, including Europe, reel from cyberattacks attributed to Iran, the country has lifted restrictions on its conventional weapons. The IRGC announced on the 7th that it has removed its self-imposed 2,000 km range limit on ballistic missiles. If true, Iran’s missile range could extend beyond the Arabian Peninsula, parts of Greece and the Balkans, reaching all of Europe and the Indian Ocean. The U.S. military raised its alert status after intelligence suggested Iran might attack U.S. air bases in the UK. According to the Wall Street Journal, the U.S. military, having obtained intelligence on a potential Iranian attack, relocated two aerial refueling tankers stationed at the UK’s Mildenhall base to Germany and moved others to different locations. It also elevated the alert level at two UK bases, Mildenhall and Lakenheath, to “FPCON Charlie,” issued when there is a high risk of terrorist attack. Iran has previously warned that retaliatory attacks against U.S. actions would not be limited to the Middle East.

Amid rising cyberterror threats, the UK has taken preemptive defensive measures. According to the UK’s Daily Telegraph, the country’s Defence Cyber Electromagnetic Activities unit is deploying more personnel to Europe and Asia to block hacker attacks. Major General Mike Fayers, commander of the unit, commented on the refrigerator hacking incident, “It shows how quickly and on what scale we can face crises in the cyber domain.”