France Attributes October Supermarket Refrigerator Cyberattack to Iranian Revolutionary Guards, Vows Strong Retaliation

In a major development, French authorities have officially attributed the cyberattack that disrupted refrigeration systems in 700 supermarket sites across France in October 2026 to a cyber unit of Iran's Revolutionary Guards. The attack caused refrigerators to malfunction by heating above 50 degrees Celsius, resulting in food losses estimated at tens of millions of euros. Unlike typical ransomware attacks, this sabotage did not seek ransom but aimed to destabilize French infrastructure.

The attack exploited vulnerabilities in outdated Danfoss control software, indicating a sophisticated targeted operation. Following similar smaller-scale incidents reported in Belgium, Italy, Sweden, and Portugal, France intensified its scrutiny of Iranian cyber activities. The investigation led by French authorities marks the first public confirmation linking the Revolutionary Guards’ "offensive cyber unit" to this hostile act.

French Foreign Minister Jean-Noël Barrot has condemned the cyberattack, labeling the Iranian Revolutionary Guards a terrorist organization responsible for a significant cyber threat. He announced that France will impose sanctions including travel bans and asset freezes targeting the Revolutionary Guards, underscoring that "France ne s’interdit rien," meaning it does not rule out any form of retaliation. Barrot emphasized, "We will take all measures we deem useful and proportionate to respond to this attack and to deter anyone who might consider doing it again."

This unprecedented attribution highlights growing concerns about cybersecurity threats to critical national infrastructure. In parallel, French lawmakers are reviewing a delayed cybersecurity bill meant to enhance the resilience of such infrastructures, reflecting a reactive stance to increasing cyber risks.

With a criminal investigation underway, Paris has signaled its readiness to escalate retaliation if necessary, marking a significant escalation in France’s cyber defense posture against state-sponsored attacks. The move sends a strong message to Tehran about the severe consequences of such cyber sabotage.