France blames Iran's Revolutionary Guards for supermarket freezer cyberattacks
Tracking: Cybersecurity of internet-connected food refrigeration controllersPolicy matter covering cyberattacks on internet-exposed refrigeration and HVAC controllers at supermarkets and food supply chain operators, including manufacturer security-by-design obligations, critical-infrastructure designation of the food and agriculture sector, vulnerability disclosure and OT incident reporting requirements, and attribution and response to repeated attack waves in Europe.
- Earliest seen
- Nov 3
- Cybersecurity Dive · Tuesday, Nov 3
- Articles · 30d
- 24
- 2.2 per story
- Outlets
- 16
- Most: Yahoo (8)
- Hill · 30d
- 0
- None in 30 days or ahead
- Contracts · 30d
- 0
- No awards or solicitations
- Momentum
- 1.5
- Articles ▲16 vs prior week
Activity
30 days back, 14 ahead · hollow = scheduledWhat's happening
Updated 9h agoFrance formally attributed the October attacks, which overheated refrigeration at roughly 700 supermarkets and hit blood bank cold storage, to the IRGC-linked Shahid Kaveh unit. Paris opened a judicial probe, is seeking arrest warrants, summoned Iran's ambassador and is pushing European sanctions, while Belgium is also examining possible Iranian links. Vendors have patched flaws in exposed controllers, and U.S. agencies are warning of similar threats to cold-chain systems.
Latest
9h agoOur first signal
Hill
From news coverageFrench Foreign Minister Jean-Noël Barrot has summoned Iran's ambassador and promised European sanctions; Belgium's interior minister backs sanctions on states conducting cyberattacks, and the EU's Kaja Kallas urges a strong European response.
Contracts
From news coverageNo procurement or budget items; reported losses include spoiled food worth millions of euros, with no specific figure given.
Pressure
21 articlesIran's Foreign Ministry rejects the accusations. Security firms and researchers including Censys, Claroty, VulnCheck and Bridewell point to internet-exposed controllers and warn the UK could be next.
Who covered it, when
A dot per article · ringed = earliest in our sourcesForces at work
share of articles- Threats & findings12 · 50%Researchers tie the attack waves to exposed Danfoss and Copeland controllers, 14 Dixell XWEB EVO flaws now patched, and about 134,000 internet-exposed ICS hosts; a U.S. joint advisory warns of cold-chain threats.Censys · VulnCheck · Copeland · Danfoss · CISA
- Geopolitics7 · 29%France publicly blamed the IRGC-linked Shahid Kaveh unit, summoned Iran's ambassador and pledged European sanctions, while Iran denies the allegations.Jean-Noël Barrot · Iran · Kaja Kallas
- Oversight3 · 13%A Paris judicial probe is under way with international arrest warrants sought for three suspects; Belgian prosecutors are also examining the attacks.French prosecutors · Laure Beccuau · French government
- Opposition2 · 8%The FBI Seattle office warned organizations that hackers increasingly target operational technology and urged isolating and patching exposed systems.FBI Seattle · Mike Herrington · French government