> ## Content Index
> Fetch the complete content index at: https://www.implicator.ai/llms.txt
> Use this file to discover other available public pages before exploring further.

# Spoiled Stock: France Blames Iran's Guards for Fridge Hacks
- URL: https://www.implicator.ai/french-officials-say-irans-revolutionary-guards-behind/
- Published: 2026-11-10T00:56:30.000Z
- Updated: 2026-11-10T00:56:30.000Z
- Description: Paris linked the freezer sabotage to a cyber unit tied to the Guards. Cybersecurity experts say the hacks appeared easy to pull off.
- Author: Marcus Schuler
- Tags: AI News, #auto

[French officials on Monday accused Iran's Revolutionary Guards](https://www.reuters.com/world/french-officials-suspect-iran-is-behind-refrigerator-hacks-sources-say-2026-11-09/?ref=implicator.ai) of the cyberattacks that knocked out commercial refrigerators and freezers across France last month. A joint report by French spy and cyber agencies said 700 commercial sites had been targeted across France. Foreign Minister Jean-Noël Barrot said the attack was "unprecedented in both its scale and its level of aggression".

Barrot said the Iranian ambassador had been summoned. He also threatened further EU sanctions against Iran. Iran's mission to the United Nations did not return messages seeking comment, and Iran routinely denies carrying out malicious cyber operations. Some Iranian media outlets have dismissed the allegations as baseless.

What Changed

- French officials on Monday accused Iran's Revolutionary Guards of the cyberattacks that knocked out commercial refrigerators and freezers across France last month.
- A joint report by French spy and cyber agencies said 700 commercial sites had been targeted and at least 15 fires had broken out.
- The report blamed Shahid Kaveh, a cyber offensive unit tied to the Guards, citing attack infrastructure, the intrusion pattern and traces of Farsi.
- France is proposing new EU sanctions, while other European countries have so far refrained from linking the hacks to Iran.

AI-generated summary, reviewed by an editor. [More on our AI guidelines](https://www.implicator.ai/about/).

## Freezers pushed past 50C

On October 11, hackers gained control of the software that regulates the temperatures of the refrigeration units used in many of France's supermarkets. The attack [targeted software provided by Danish engineering firm Danfoss](https://www.bbc.com/news/articles/cmg474vk6dyqo?ref=implicator.ai). The software allows retailers to manage their cold units remotely.

The hackers pushed freezers, fridges and chiller cabinets from as low as -27C to well over 50C in some cases. The report said at least 15 fires had broken out.

Most of those affected were supermarkets, but the hacking also reached small butcher stores, a slaughterhouse and factories processing foodstuffs. More than 100 of Coopérative U's supermarkets were hit, as well as 180 stores from Intermarché and its Netto brand. France's foreign ministry estimated the food losses at tens of millions of euros.

FREE · ABOUT FIVE MINUTES

Track the hacks that reach everyday machines.

Implicator cuts the flood to the developments worth your attention, with concise reporting on what changed and why it matters. Delivered every weekday at 4:45 a.m. Pacific, 7:45 a.m. Eastern.

Email address 

Get the free briefing 

Check your inbox for the confirmation link.

From San Francisco. No spam. Unsubscribe anytime.

## How Paris built the case

The report accused Shahid Kaveh, described as a cyber offensive unit tied to the Revolutionary Guards. It named three alleged associates: Hamid Reza Lashgarian, Mahdi Lashgarian and Reza Salarvand. The hackers worked through numerous front groups masquerading as vigilante hackers, the report said.

French officials linked the unit to the hacks through the digital infrastructure used to sabotage the fridges, the pattern of the intrusion and traces of Farsi in the attack infrastructure. [Paris prosecutor Laure Beccuau](https://www.theguardian.com/world/2026/nov/09/france-blames-irans-revolutionary-guards-for-cyber-attacks-on-supermarket-fridges?ref=implicator.ai) cited "the use of Farsi and IP addresses traced back to devices located in Iran". Paris prosecutors have requested international arrest warrants aimed at the perpetrators.

Microsoft had privately tied Iran to the October cold-storage sabotage at least two weeks ago, according to three people familiar with the matter.

## Sanctions on the table

France is [proposing new EU sanctions](https://www.pcmag.com/news/france-blames-refrigerator-hacks-on-iran-proposes-sanctions-to-hit-back?ref=implicator.ai) against Iranian entities and individuals involved. The foreign ministry said: "France reserves the right to take any additional measures, public and non-public, deemed necessary and proportionate to respond to these cyberattacks."

So far, other European countries have refrained from linking the hacks to Iran.

Know someone who'd find this useful? [✉️ Email it to a friend in one click](mailto:?subject=A%20newsletter%20I%20think%20you%27d%20like&body=This%20is%20one%20of%20maybe%20three%20newsletters%20I%20actually%20read.%20The%20rest%20just%20pile%20up%2C%20unread%2C%20judging%20me.%0A%0AAnd%20yes%2C%20this%20email%20mostly%20wrote%20itself%2C%20which%20is%20a%20little%20on%20the%20nose%20for%20an%20AI%20newsletter.%20Doesn%27t%20make%20it%20wrong.%20implicator.ai%20is%20good.%0A%0ASubscribe%20free%3A%20https%3A%2F%2Fwww.implicator.ai%2Fsubscribe%2F%3Futm%5Fsource%3Dnewsletter%26utm%5Fmedium%3Dforward%26utm%5Fcampaign%3Demail%5Fforward), or they can [subscribe free here](https://www.implicator.ai/subscribe/?utm%5Fsource=newsletter&utm%5Fmedium=forward&utm%5Fcampaign=forward%5Fto%5Fcolleague).

## What the attribution leaves open

A second wave of hacking this month hit more than 100 establishments across Europe and affected refrigerators used by French blood banks. It is not known if the instances are linked.

Attribution of cyberattacks is extremely hard, as hackers are able to hide their locations. A pair of Russian-aligned hacktivist groups claimed they were responsible. Few believed them.

The hacks also appeared to have been easy to pull off, cybersecurity experts have said. The firm behind many of the stricken units said several were obsolete or were running outdated firmware. Saher Naumaan, a senior threat researcher at Proofpoint, said the sabotage was less a measure of Iran's cyber prowess than of "how exposed these systems are."

Gérôme Billois, a partner at the cybersecurity company Wavestone, said: "For the moment they are attacking easy equipment but as a state group that has the means, the determination and the time, we should be prepared to see attacks on other systems like water or electricity."

Frequently Asked Questions

Who does France blame for the supermarket freezer hacks?

French officials accused Iran's Revolutionary Guards. A joint report by French spy and cyber agencies named Shahid Kaveh, described as a cyber offensive unit tied to the Guards, and three alleged associates.

How did the hackers reach the freezers?

On October 11, hackers gained control of the software that regulates the temperatures of refrigeration units in many French supermarkets. The attack targeted software provided by Danish engineering firm Danfoss, which retailers use to manage cold units remotely.

How much damage did the attacks cause?

The report said 700 commercial sites had been targeted and at least 15 fires had broken out. France's foreign ministry estimated the food losses at tens of millions of euros.

What evidence links the attacks to Iran?

French officials pointed to the digital infrastructure used in the attacks, the pattern of the intrusion and traces of Farsi. The Paris prosecutor also cited IP addresses traced back to devices located in Iran.

How is France responding?

Barrot said the Iranian ambassador had been summoned and threatened further EU sanctions. Paris prosecutors have requested international arrest warrants aimed at the perpetrators.

AI-generated summary, reviewed by an editor. [More on our AI guidelines](https://www.implicator.ai/about/).

[Can a Hacked Alert App Set Off Ukraine's Loudspeakers?The warning issued in Kyiv at approximately 22:47 local time on Sunday ran to two short sentences. "Radiation threat. Radiation threat declared in Kyiv." The next message came at 22:48, written in RuThe Implicator![](https://www.implicator.ai/content/images/2026/11/20261102-045731-ukraine-says-air-raid-alert-app-compromised-late-sunday.webp)](https://www.implicator.ai/ukraine-says-air-raid-alert-app-compromised-late-sunday/)

[DeepSeek barred at US civilian agencies; hackers run up OpenCode users’ AI billsIMPLICATOR .ai Morning Briefing · From San Francisco Tuesday, October 20, 2026 9 stops From San Francisco 1 The Editorial Morning, humans. Today’s three storiesThe Implicator![](https://www.implicator.ai/content/images/2026/10/20261019-191510-nl_opencode_keys.webp)](https://www.implicator.ai/deepseek-barred-opencode-hack-ai-bills/)

[OpenAI and 100 firms urge cyber defense; AI vocabulary hits 45% of GitHub PRsIMPLICATOR .ai Morning Briefing · From San Francisco Friday, August 28, 2026 10 stops = about 5 minutes FROM SAN FRANCISCO 1 The Editorial Morning, humans. TodaThe Implicator![](https://www.implicator.ai/content/images/2026/08/20260827-205054-nl_unmanned_console.webp)](https://www.implicator.ai/openai-cyber-letter-github-ai-vocabulary-45-percent/)