France pins supermarket refrigeration sabotage on the IRGC and promises an EU sanctions push

On 12 October attackers reached internet-connected refrigeration controllers at French supermarkets and switched on defrost cycles, raising temperatures and causing spoilage and, in several stores, fires. BFMTV first reported the method, relayed by CNN. French officials put the scale at roughly 700 of France’s approximately 10,000 supermarkets, per AP; chains affected included E.Leclerc, Intermarché, Carrefour, Monoprix and Coopérative U, according to Al Jazeera. Intermarché told AP it lost “tens of millions of euros” in a single day — a company self-report, not an audited figure. On Monday 9 November Paris prosecutor Laure Beccuau said a formal investigation had opened into suspected organised cybercrime with the aggravating circumstance of “having been committed to serve the interests of a foreign power — in this case, Iran.” Foreign Minister Jean-Noël Barrot called it “the first large-scale cyberattack carried out for sabotage purposes on French soil.”

Iran’s ambassador was summoned on the morning of Tuesday 10 November, the French foreign ministry confirmed to Reuters. Tehran’s foreign ministry called the accusation “baseless and hostile” and, per CNN, said it was meant “to divert public opinion from France’s destructive policies toward Iran.” Speaking to France Info the same day, Barrot described an “attack of unprecedented scale and aggression in our country,” said French cyberdefence doctrine gave authorities “a range of options,” and said France would press for EU sanctions. Two things remain open. AP reports that in the week before 9 November a further attack targeted several French blood banks and tried to drive temperatures to extreme levels, but was thwarted before any damage to blood products — an attempt, not an event. And a second wave around 2 November hit retailers in Belgium, Luxembourg, Sweden and Ireland; CNN says it is still unclear whether those are linked to the French incident.

Assessment: The interesting shift is not that Iran is accused of hacking France — it is the target class. Refrigeration controllers are cheap, unmonitored, remotely serviced and sit between IT and physical consequence, which makes them the lowest-cost way to impose visible civilian cost without crossing any threshold anyone has defined. Watch the blood-bank attempt rather than the spoiled food: it is the same technique pointed at something that cannot be replaced with a delivery truck. And treat Barrot’s sanctions promise as untested until a Council listing proposal exists. A press conference is not a measure. The European wave is not yet forensically joined to October; until ANSSI or a Belgian or Swedish CERT says so, this is a French bilateral case, not a continental campaign.