France Attributes Supermarket Freezer Sabotage to Iran-Linked Hackers Amid Wider European Attacks

Some refrigerators had their temperature turned up so high they caught fire.
The physical damage from a hack France attributes to Iran's Revolutionary Guard.
Mark

Why does a spoiled-food hack get a foreign minister's attention?

Mimi

Because France chose to name a state. It called the attack unprecedented in scale and aggression and promised Europe-wide sanctions. That's a political decision as much as a technical one.

Mark

And the attack itself was crude?

Mimi

By the account of Rafe Pilling at Sophos, yes. Default passwords on fridge controls. Not particularly complex, in his words.

Luke

Worth separating what's established. France has attributed it to the IRGC. We aren't shown the evidence in this reporting, so that's an official claim, not something independently verified here.

Mark

What about the other incidents, in Israel and at US bases?

Mimi

The May attack on an Israeli food plant and the August freezer failures at US bases haven't been officially attributed to Iran. The US case is only reportedly being treated as a suspected hack.

Luke

Same caution on the European wave last week. Pilling says there's a presumption of a link. That's an expert's inference, not a confirmed finding.

Mark

Why would Iran bother with fridges?

Mimi

Pilling says Iran uses cyber-attacks to signal displeasure and project power. Past operations carried slogans or deepfakes; this one needed no message.

Luke

And that's his reading of motive. Nobody quoted here has claimed to know the intent behind this specific attack.

Mark

Where does the UK warning fit?

Mimi

It's context, mostly about AI. But the piece says the fridge case is really about geopolitics, since the flaws were easy to find.

  • Supermarket fridges were driven to dangerous temperatures, and some caught fire, forcing staff to dump spoiled stock across France.
  • Paris has blamed hackers tied to Iran's Islamic Revolutionary Guard Corps and vows Europe-wide sanctions in response.
  • The intruders walked in through default passwords, an attack that experts call simple yet effective at projecting power.
  • Similar freezer failures in Israel and at US military bases now sit under suspicion, while the wider question of who else is responsible remains open.

Across France this week, supermarket shelves emptied of spoiled meat and melting ice cream as refrigeration units, pushed past safe temperatures by hackers, were hauled to the bins. The French government has now named those it believes responsible, pointing to operatives linked to Iran's Islamic Revolutionary Guard Corps, and so a quiet and ordinary machine of daily life has become a theatre in a much older contest between states. It is a reminder that the infrastructure we rarely think about, the cold boxes that keep our food safe, can be turned into a message in a long conversation of hostility.

In the hours after the attack, workers in French supermarkets carried spoiled meat and puddles of melted ice cream out of their refrigeration units and into rubbish containers. Some of the units had been driven so hot that they caught fire. Now the French government has said who it believes is responsible: hackers working under the Islamic Revolutionary Guard Corps, a central part of Iran's military establishment.

The foreign minister called the attack one of "unprecedented scale and unprecedented aggression" and promised Europe-wide sanctions against those responsible. Unlike some earlier Iranian operations, this one carried no political message of its own. The disruption alone was enough to make headlines around the world.

The case belongs to a pattern. Iranian-linked hackers have previously sought attention, interrupting streaming services and defacing water-control screens with political slogans. Freezer failures at an Israeli food plant and at US military bases have also been reported, and the latter is now suspected to be a hack, though neither has been officially attributed to Iran.

Security experts say the method was not sophisticated. The hackers simply used default passwords to reach the fridge controls, which fits a broader picture of hostile states using cyber operations to signal displeasure and project power. The attacks also come as the UK's cybersecurity centre warns of a coming rise in incidents, driven largely by AI tools that can find and exploit weaknesses quickly.

For now, the open questions are whether the promised sanctions will materialise and whether the other freezer incidents will be formally linked to the same actors.

In the hours after the hack, supermarket workers in France hauled spoiled meat and puddled ice-cream out of their refrigeration units and into rubbish containers. Some of the fridges had been pushed to temperatures so high that they caught fire. Now the French government has said who it believes was behind it: hackers operating under the Islamic Revolutionary Guard Corps, a key branch of Iran's military establishment.

The French foreign minister called the attack an act of "unprecedented scale and unprecedented aggression" and promised that "Europe-wide sanctions" would be imposed on those responsible. Unlike some earlier Iranian operations, this one carried no message. The disruption itself drew headlines around the world.

Iranian-linked hackers have a record of wanting to be noticed. In 2023, a state-backed group interrupted TV streaming services in the United Arab Emirates to broadcast a deepfake report on the war in Gaza. That same year, hackers affiliated with Iran put the slogan "down with Israel" on the screens of water-control equipment made by an Israeli firm.

The French case does not stand alone. In May, industrial freezers at an Israeli food production plant were attacked. In August, a wave of freezer malfunctions spoiled food at US military bases, and that episode is reportedly now being treated as a suspected hack. Neither has been officially attributed to Iran, but the French announcement is the first to implicate a state in this type of attack.

Rafe Pilling, a senior director at the cybersecurity firm Sophos, said the method fits what is known of Iranian capabilities. The hackers got into the fridge controls using default passwords. "The attacks themselves were not particularly complex," he said. He added that there is now a presumption that the French attacks are linked to a wave of rogue defrosting hacks across Europe last week.

Pilling placed Iran within a familiar group of hostile cyber actors facing the west: China, Russia, Iran and North Korea. Each has its own aims. China has concentrated on industrial espionage and mass data gathering. Russia has focused on disrupting enemy infrastructure and spreading disinformation. North Korea hacks crypto exchanges because it needs money. Iran, in Pilling's description, wants to fire a shot across the bow of its enemies. "In general Iran uses cyber-attacks to project power internationally and to signal their political displeasure with regional and international adversaries," he said.

The fridge hacks came as the UK's national cybersecurity centre warned that Britain is in the "foothills" of a new level of cyber threat and should expect a "huge rise" in incidents. Its main concern is AI, which can now highlight previously unforeseen flaws in IT systems and help attackers plan and carry out operations.

The Guardian notes, though, that AI is not the underlying context of the fridge attacks; geopolitics is. The refrigeration vulnerabilities were relatively easy to find and exploit. Still, the combination of powerful new technology and tense relations between states makes for an alarming landscape. What to watch next is whether the promised Europe-wide sanctions materialise, and whether the other freezer incidents are formally attributed.

The attacks themselves were not particularly complex.
— Rafe Pilling, senior director at Sophos
Unprecedented scale and unprecedented aggression.
— France's foreign minister
Quieres la nota completa? Lee el original en The Guardian ↗
Contáctanos FAQ