On a Monday in Paris, the French foreign minister Jean-Noël Barrot named the power behind a months-long campaign against the cold that keeps food and medicine safe: Iran's Revolutionary Guard Corps, working through its hacking arm. The attacks reached into grocery freezers and toward blood banks, turning the quiet machinery of refrigeration into a front in a wider struggle that has already spread through water systems and American medical firms this year. It is a reminder that the most ordinary devices, once connected to the internet, can carry the weight of a nation's conflicts. What comes ne
France Formally Blames Iran's Revolutionary Guard for Cyberattacks on Grocery and Blood Bank Freezers
Attacks targeted blood bank systems, though they were halted before any blood was spoiled, and spoiled food and goods at grocery stores.
The first large-scale act of sabotage on French national territory
Mark
Why does France naming the IRGC matter, when hacks have been blamed on Iran before?
Mimi
Because this is a formal attribution from a foreign minister, with the ambassador summoned and sanctions promised. Barrot called it the first large-scale sabotage on French soil, which frames it as an attack on the country, not just a nuisance.
Luke
Worth noting what's on the record. Barrot's attribution is a government statement, and the public reporting here doesn't show the evidence behind it. Reuters had it first from sources.
Mark
What actually happened to the freezers?
Mimi
Hackers got into web-based controllers managing industrial cold units at grocery stores and supermarkets and raised the temperatures to spoil food. Thousands of units were targeted across France and Europe in two waves.
Luke
Targeted is the word to hold onto. The reporting doesn't give a figure for how many units were actually compromised or how much food was lost.
Mark
And the blood banks?
Mimi
They were hacked, but according to the French Blood Establishment the attacks were stopped before any blood was spoiled.
Luke
That's the Blood Establishment's account, and it's a reassuring one, but it's still one source's account of its own systems.
Mark
Is the vulnerability still open?
Mimi
Researchers say the controllers can be hacked remotely, and some Danfoss models no longer get security fixes.
Luke
So the next steps are sanctions and a judicial process, and neither of those closes the hole in the hardware. Iran's side hasn't responded yet, so that's still unknown.
O Pulso
- Thousands of internet-connected refrigeration units across France and Europe were breached in waves through October and November, and temperatures were pushed up until food and goods spoiled.
- Blood bank intrusions were caught and halted before any blood was lost, but the near miss left the system's fragility exposed.
- Paris has summoned Iran's ambassador, is pressing EU partners for sanctions, and has handed the case to French justice.
- Some affected controllers, made by Danfoss, no longer receive security patches, so the weakness cannot simply be closed on those units.
- The attribution lands amid a year of destructive attacks linked to Iran, and the question now is whether exposed controllers are replaced or isolated before the next wave.
On a Monday in Paris, the French foreign minister Jean-Noël Barrot named the power behind a months-long campaign against the cold that keeps food and medicine safe: Iran's Revolutionary Guard Corps, working through its hacking arm. The attacks reached into grocery freezers and toward blood banks, turning the quiet machinery of refrigeration into a front in a wider struggle that has already spread through water systems and American medical firms this year. It is a reminder that the most ordinary devices, once connected to the internet, can carry the weight of a nation's conflicts. What comes next will be decided less by accusation than by sanctions, courtrooms, and whether the vulnerable machines are finally fixed or unplugged.
On Monday in Paris, foreign minister Jean-Noël Barrot told reporters that the government could now say who was behind a run of cyberattacks on refrigeration across France. The culprit, he said, was Iran's Islamic Revolutionary Guard Corps, the country's military and its hacking arm.
The attacks arrived in at least two waves, through October and into November. Intruders broke remotely into web-based controllers that run fleets of industrial fridges and freezers, many of them connected to the internet. In grocery stores and supermarkets, they pushed temperatures up until food spoiled and goods were ruined. Blood banks were targeted as well, but according to the French Blood Establishment, the intrusions were stopped before any blood was lost.
Barrot called the campaign an attack of unprecedented scale and aggression, the first large-scale act of sabotage on French soil, and promised it would not go unanswered. France has already summoned Iran's ambassador and will push for European sanctions, while the case now rests with the French justice system. Iran's consulate in New York had not responded to a request for comment.
The episode follows a year of destructive attacks the U.S. has tied to pro-Iranian hacktivists, including intrusions on water providers and mass disruption at the medical device maker Stryker, all against a backdrop of war that killed Iran's supreme leader in February.
The underlying weakness has not gone away. Researchers have warned that these controllers can be hacked remotely, and some models from the Danish company Danfoss no longer receive security fixes, so for those units the flaw cannot simply be patched. What happens next depends on whether the sanctions materialize, how the courts proceed, and whether operators replace or isolate the exposed controllers.
On Monday in Paris, French foreign minister Jean-Noël Barrot told reporters that he could confirm who was behind a run of cyberattacks on refrigeration across France: the Islamic Revolutionary Guard Corps, Iran's military and its hacking arm. With that statement, the French government formally put a name to the attacks.
The attacks came in at least two waves, through October and into November. Hackers broke remotely into web-based controllers that manage fleets of industrial refrigerated and freezer units. Thousands of these internet-connected units were targeted in France and elsewhere in Europe. At grocery stores and retail supermarkets, the intruders raised the temperatures so that food would spoil and goods would be destroyed.
Blood banks were hit too. According to the French Blood Establishment, those attacks were stopped before any blood was spoiled.
Barrot described the campaign in strong terms. He called it an attack of unprecedented scale and aggression, and said it was the first large-scale act of sabotage on French national territory. In his words it constituted a major assault on the nation's interests and on the security of the French people. He added that the hacks would not go without consequences.
Some of those consequences have already started. France has summoned Iran's ambassador. Reuters was first to report the attribution to Iran, citing sources ahead of Barrot's remarks. The French government said it would also push for sanctions across Europe against those who carried out the hacks, and Barrot said the matter is now in the hands of the French justice system. A spokesperson for Iran's consulate in New York did not immediately respond to a request for comment.
The French announcement follows a series of destructive cyberattacks attributed to Iran this year. They include a spate of hacks on U.S. water providers and other intrusions that caused mass disruption at Stryker, the U.S. medical device maker, and elsewhere. The U.S. government linked those attacks to pro-Iranian hacktivists working for Tehran, likely in response to the U.S.-Israel-led war against Iran, which killed its supreme leader in February.
The weakness the attackers used has not gone away. Security researchers have warned that the web-based controllers can be hacked remotely. Some of the affected models, made by the Danish company Danfoss, no longer receive security fixes, which means the flaw cannot simply be patched on those units.
What to watch now is whether the sanctions Paris has promised materialize at the European level, what the French justice system does with the case, and whether operators replace or isolate the controllers that remain exposed.
Citações Notáveis
I am able to confirm that responsibility for this act lies with the Islamic Revolutionary Guard Corps.— Jean-Noël Barrot, French foreign minister
The attack was of unprecedented scale and aggression, and will not go without consequences.— Jean-Noël Barrot, French foreign minister (paraphrased)
Quer a matéria completa?
Leia o original em TechCrunch ↗
War & Conflict