France blames Iran's IRGC for cyberattack on 700+ supermarket fridges
Synopsis
Key Takeaways
French Foreign Minister Jean-Noël Barrot has formally accused Iran's Islamic Revolutionary Guard Corps (IRGC) of orchestrating a large-scale cyberattack that targeted refrigeration units across more than 700 French retail distribution sites on the night of 11–12 October 2024. The accusation, made following a G7 Foreign Ministers' Meeting in Paris, marks one of the most direct European attributions of a cyberattack to Iranian state actors in recent years.
What the Attack Involved
The cyberattack hit refrigeration systems at major French retailers including Carrefour, Monoprix, Intermarché, and Cooperative U. Attackers reportedly overrode temperature controls manually, causing widespread spoilage and equipment failures. The French Foreign Affairs Ministry confirmed that the attack caused "significant material damage, including fires," with estimated losses of food and other goods amounting to tens of millions of euros.
What the French Government Said
In a statement shared on X, Barrot said: "On October 11 and 12, nearly 700 distribution sites were hit by a cyber campaign of unprecedented scale and aggression. Today, thanks to the work of government agencies, we know who is responsible: the Islamic Revolutionary Guard Corps of the Islamic Republic of Iran."
He further stated: "Iran's ambassador has been summoned. We will sanction those responsible and take all measures we deem necessary and proportionate to respond to these attacks and deter anyone who might consider repeating them." The ministry described the attacks as a major threat to both French national interests and the security of French nationals.
A Pattern of Iranian Destabilisation, French Authorities Say
French authorities noted this was not an isolated incident, citing what they characterised as a pattern of Iranian-linked hostile activity. Prior incidents referenced include a 2023 hack on satirical newspaper Charlie Hebdo and alleged hostile actions during the 2024 Olympic Games in Paris. The scale and industrial targeting of this latest attack — focused on civilian food supply infrastructure rather than government systems — represents a notable escalation in tactics, according to officials.
EU Response and Next Steps
European Union Foreign Policy Chief Kaja Kallas said the upcoming Foreign Affairs Council meeting on 16 November would provide an opportunity for EU member states to discuss the broader pattern of cyberattacks across Europe. "If they are attributed, our response should be stronger," Kallas said. France is expected to push for coordinated EU-level sanctions measures alongside its own bilateral response against those identified as responsible.