France names the IRGC over supermarket freezer sabotage, and asks for three arrest warrants

Speaking in Paris on Monday 9 November after a crisis meeting held on the margins of a G7 foreign ministers' gathering he was hosting, Barrot said: “I can confirm that this attack was carried out by the Islamic Revolutionary Guard Corps (IRGC) of the Islamic Republic of Iran,” according to AFP. He put the French scope at 700 retail sites and called the operation, in France 24’s rendering, “the first large-scale cyberattack aimed at sabotage on our national territory” and “a major attack on the nation’s interests and the security of the French people.” Al Jazeera carried his description of the attack as “unprecedented in its level of aggression”; NPR rendered the same remark as “unprecedented in both its scale and its level of aggression.” Barrot pledged to “implement sanctions at the European level against all those responsible,” and told FranceinfoTV the next day that France would “rule nothing out.”

The judicial track moved in parallel. The Paris prosecutor’s office opened an investigation and said it had requested international arrest warrants against the leader of Shahid Kaveh and his two deputies — three named targets, per CBC. AFP reported the prosecutor’s description of Shahid Kaveh as “an offensive cyber unit affiliated with the Electronic and Cyber Centre of the Islamic Revolutionary Guard Corps.” No technical report has been published. Cybernews, reporting secondhand on the evidentiary basis, says French authorities linked the attacks to the unit through traces of Farsi, IP addresses associated with Iran, and attack infrastructure previously tied to it. France summoned Iran’s ambassador on 10 November. Tehran’s foreign ministry the same day “categorically rejects the French government’s baseless and one-sided accusations,” per Euronews, and said France “is merely projecting its own governance failures.”

Assessment: Watch the gap between the announcement and the instrument. Barrot promised EU-level sanctions; Kaja Kallas, standing beside the announcement, said the response “should be strong” while conceding she had only just learned of the attribution — the bloc’s foreign policy chief was briefed at or after the podium. That is not a detail about manners, it is a measure of how much coordination exists behind a sanctions pledge that requires twenty-seven governments. Note also the timing: a public attribution landing in a G7 week in Paris. Of the three reported indicators, Farsi strings and Iranian IPs are trivially spoofable; only infrastructure overlap carries weight, and none of it is published. Until it is, the arrest-warrant request is the whole evidentiary disclosure.