France accuses Iran of being behind massive cyberattack on supermarket fridges

France accuses Iran of being behind massive cyberattack on supermarket fridges France has accused Iran of being behind the massive cyberattack on supermarket fridges last month. The government cited evidence collected by its cyber‑defence unit and intelligence services, claiming the operation was carried out by a sophisticated state‑backed hacking group. The alleged attack disrupted refrigeration units in major grocery chains across the country, leading to spoilage of thousands of items and financial losses estimated in the millions of euros..

French officials stated that the incident was part of a broader campaign to destabilise European economies and undermine public confidence in essential infrastructure. The first signs of trouble appeared in early March, when several supermarkets reported a sudden, unexplained shutdown of their cold‑storage systems. Employees noted that the display screens on the fridge units went blank and the temperature sensors read abnormal values..

The chain’s maintenance crews were unable to resolve the issue, and the refrigeration units failed to restart even after a complete power cycle. By the time the problem was identified, the stored produce had begun to spoil, forcing stores to discard large quantities of fresh fruit and vegetables. French authorities quickly activated their cyber‑security protocols, initiating an investigation in partnership with the European Union Agency for Cybersecurity (ENISA)..

The investigation involved forensic analysis of the affected systems, tracing the origin of the malicious code and mapping the command‑and‑control infrastructure used by the attackers. Preliminary findings pointed to a set of command servers located in the Middle East, with traffic patterns matching those used by known Iranian hacking groups. The evidence, according to the ministry, was corroborated by an independent cybersecurity firm hired by the state..

Prime Minister Élisabeth Borne addressed the nation on a televised briefing, stating that the French government had unequivocally identified Iran as the perpetrator. She warned that this attack was part of a broader strategy of disruption and intimidation aimed at European markets. The prime minister also emphasised that the French cyber‑defence capabilities had been stretched to their limits but had managed to contain the threat before it spread to other sectors..

She called for a coordinated response from European partners to counter the growing cyber threat from state actors. In a statement, the Iranian foreign ministry denied all allegations, describing them as unsubstantiated and politically motivated. The spokesperson for the ministry said that Iran had no involvement in any wrongdoing and that the accusations were an attempt to deflect responsibility..

Iran’s defence ministry also issued a brief comment, stating that any claims of Iranian involvement in such incidents are baseless and that the nation remains committed to maintaining peaceful relations with its European neighbours. The supermarket chains affected have issued statements acknowledging the damage but have not yet confirmed whether the damage was directly caused by the cyberattack. The largest chain, Carrefour, announced that it would conduct an internal review and cooperate fully with law enforcement..

Meanwhile, smaller regional suppliers reported increased costs as they scramble to find alternative refrigeration solutions. The incident has raised concerns over the resilience of supply chains, particularly those that rely heavily on automated systems susceptible to cyber intrusions. European Union officials are also taking notice..

The European Commission’s Cybersecurity Union (EU Cybersecurity Union) has convened a special meeting of member states to discuss the implications of the French findings. The EU is expected to issue a joint statement condemning the alleged attack and to consider sanctions against the identified threat actors. Additionally, the European Parliament will likely hold a hearing on the necessity for stronger cyber‑security regulations across the bloc, especially for critical infrastructure such as food storage and transportation..

Cyber‑security experts warn that the incident could signal a shift in the tactics employed by state‑backed hacking groups. Martin Laurent, a senior analyst at the French Institute for Digital Studies, said that the use of physical infrastructure as a target demonstrates a new level of sophistication and a willingness to cause tangible economic damage. Laurent also highlighted that the attack could have been intended to provoke fear, thereby weakening public trust in national security institutions..

France’s National Cyber Security Agency (ANSSI) has announced plans to enhance its monitoring capabilities, specifically focusing on the integrity of industrial control systems (ICS) used in commercial refrigeration. The agency intends to deploy advanced intrusion detection systems and to collaborate with manufacturers to patch known vulnerabilities. In addition, ANSSI has urged all businesses to conduct regular security audits and to invest in redundancy for critical equipment..

The agency’s spokesperson stated that the incident is a wake‑up call for the entire economy to take cyber‑security seriously. The international community remains divided. While some European leaders echo France’s accusations and call for swift action, others urge caution, citing the need for concrete evidence before attributing blame..

In the United States, the Department of Justice has stated that it will review the French evidence and determine whether to pursue any legal action. Meanwhile, the United Nations has called for a global framework to address state‑sponsored cyber aggression, suggesting that incidents like this highlight the urgent need for diplomatic solutions. As the investigation continues, the French government is preparing to release a full report detailing the technical aspects of the attack, the chain of command identified, and the economic impact on the affected industries..

The report is expected to be published within the next 60 days and will be used to guide future policy decisions. Meanwhile, supermarkets across France are working to restore operations, with many opting to source fresh produce from local farms to mitigate future risks. The incident has already prompted a.