French prosecutors have attributed a cyberattack on grocery store refrigeration systems to an Iranian Revolutionary Guard cyber unit, saying the October operation affected about 700 retail locations and caused significant food spoilage. A judicial investigation is underway, but the allegations have not been tested in court.
The attack took place overnight from October 11 to 12, according to France’s national cybersecurity agency, ANSSI. Prosecutors said the attackers remotely accessed equipment through web interfaces, forced prolonged defrost cycles and disabled alerts meant to warn operators when temperatures crossed set thresholds.
The Paris prosecutor’s office has identified the group as Shahid Kaveh, which it describes as a cyber-offensive unit affiliated with the Islamic Revolutionary Guard Corps’ Electronic and Cyber Center. Investigators are targeting the alleged group leader, two deputies and other possible participants.
France seeks European sanctions
Foreign Minister Jean-Noel Barrot said France would summon Iran’s ambassador and call for European sanctions. He also said the government would not limit its response to those measures and was taking steps to deter further attacks, according to CBS News.
Similar refrigeration and freezer hacks were later reported at supermarkets in Belgium, Luxembourg and Sweden. French blood banks were also hit by a separate cyberattack, but their products and samples were not damaged. Officials have not said that those incidents were connected to the French grocery store operation.
The French investigation includes allegations of interference with automated data systems, damage caused by means dangerous to people and activity carried out to serve a foreign power. Prosecutors cited Persian-language use and internet addresses linked to devices in Iran as indicators in their inquiry. Iranian authorities had not immediately responded to the allegations.
Reid Bentley