France Accuses Iran's IRGC of Cyberattack That Heated Supermarket Fridges to 50°C, Opens Probe

Spoiled food was discarded and blood supplies had to be moved after attacks disrupted refrigeration at French blood banks.
Fridges and freezers heated to 50°C for about six hours
Hackers altered refrigeration settings at hundreds of French supermarkets on October 11.

In the autumn of this year, a quiet routine of commerce, the cold chain that keeps food and medicine safe, was turned against itself when hackers reached the refrigeration systems of hundreds of French supermarkets. For six hours, the machines meant to preserve meat and ice cream became ovens, and workers were left hauling ruined stock to the bins. France now names Iran's Revolutionary Guard as the author of the attack, a claim that moves the story from the mysterious realm of anonymous intrusion into the older and heavier arena of state rivalry. Whether the accusation holds will be tested in a Paris courtroom and in the diplomacy of the European Union, while Tehran has so far kept its silence.

On October 11, staff at several Paris supermarkets hauled spoiled meat and frozen goods to large rubbish containers. Hackers had reached the refrigeration systems of hundreds of stores across France and altered their settings, and for about six hours the fridges and freezers climbed to 50°C. Some units were heated so far that they caught fire, and the day ended with boxes of ruined stock and melted ice cream piling up behind the shops.

On Monday, French foreign minister Jean-Noel Barrot said France knew who was responsible. He named the Islamic Revolutionary Guard Corps of Iran as the author of the October 11 and 12 attacks, called the operation unprecedented in scale and aggression, and promised sanctions at the European level. Tehran did not immediately respond.

The legal process has already begun. Paris prosecutor Laure Beccuau opened an investigation into the head of Shahid Kaveh, an offensive cyber unit linked to the IRGC's Electronic and Cyber Center, along with his two deputies and anyone else who may be identified. Experts told Reuters the intrusions looked easy to carry out, and the manufacturer of many affected units said some were outdated or ran old firmware.

The story has not stayed in October. This month, more than 100 establishments across Europe were hit in a new series of attacks, and French blood banks saw their refrigeration disrupted, forcing staff to move blood supplies to other cold storage. What comes next is whether Iran answers the charge and how quickly the promised sanctions take shape, while the Paris investigation tests how much France can prove in court.

In several Paris supermarkets on October 11, staff hauled spoiled meat and frozen goods out to large rubbish containers. Hackers had reached the refrigeration systems of hundreds of stores across France and changed their settings, and for about six hours the fridges and freezers heated to 50°C (122°F).

On Monday, French foreign minister Jean-Noel Barrot said France knew who was responsible. He confirmed that the attacks of October 11 and 12 were carried out by the Islamic Revolutionary Guard Corps of Iran. He called the operation unprecedented in both scale and aggression, and said France would impose sanctions at the European level against everyone responsible. Tehran did not immediately respond to the allegations.

The legal process has already started. Paris prosecutor Laure Beccuau announced a judicial investigation targeting the head of Shahid Kaveh, an offensive cyber unit affiliated with the IRGC's Electronic and Cyber Center, known as the IRGC-CEC. The investigation also covers his two deputies and any other individuals who may be identified.

The October 11 attack bypassed the temperature controls on commercial refrigeration units in hundreds of stores. The damage went beyond spoiled stock. Some units were heated so far that they caught fire. In the hours afterward, supermarket workers disposed of boxes of spoiled meat and melted ice cream.

The attack also appears to have been easy to carry out. Cybersecurity experts told Reuters as much at the time. The company that made many of the affected units said some were outdated or running on old firmware, which may have left them more exposed to intrusion.

The episode has not stayed in October. This month a further series of cyberattacks hit more than 100 establishments across Europe. Those incidents disrupted refrigeration units used by French blood banks, and staff had to move some blood supplies into other cold storage facilities.

What to watch now is twofold: whether Iran responds to the accusation, and how quickly the European sanctions Barrot promised take shape. The Paris investigation, aimed at named leadership of a specific unit, will show how much France can substantiate in court.

I can confirm that this attack was carried out by the Islamic Revolutionary Guard Corps of the Islamic Republic of Iran.
— Jean-Noel Barrot, French foreign minister
Möchten Sie die ganze Geschichte? Das Original lesen bei Hindustan Times ↗
Kontakt FAQ