The facts
ANSSI says attackers compromised refrigeration controllers at about 700 large-retail sites during the night of 11–12 October and raised defrost settings, causing merchandise losses and fires at at least 15 sites. [2]
France’s foreign ministry estimates food losses at several tens of millions of euros. It says its C4 cyber-coordination body attributed the attack to Shahid Kaveh, which French authorities describe as affiliated with the IRGC’s electronic and cyber center. [1][2]
France says it will summon Iran’s ambassador and propose new EU sanctions against entities and individuals implicated in the attack; the proposal is not an adopted EU sanctions decision. [1][4][5]
The Paris prosecutor opened a judicial investigation, and ANSSI says prosecutors sought international arrest warrants for several members of Shahid Kaveh. The warrant requests are not confirmed arrests or a court finding of guilt. [2][5]
France’s attribution concerns the October supermarket campaign. Le Monde reports a smaller attack on other French supermarkets the following night used a different supplier and has not been established as the work of the same group. [5]
Still unconfirmed
- Whether EU partners will adopt France’s proposed sanctions remains unresolved.
- Whether the smaller attack the following night, or separate incidents reported elsewhere in Europe in November, were linked to the October campaign has not been established.
Sources
References support the numbered facts above. Source checks: 9 Nov 2026, 19:30 UTC.
- Declaration attributing cyberattacks to Iran
France Ministry for Europe and Foreign Affairs · Primary source · 9 Nov 2026
Opened the ministry’s 9 November declaration. It attributes the October campaign to Iran, gives the site and loss estimates, and states the ambassador-summoning and proposed EU-sanctions response.
- Cyber operations targeting France by Iranian actors linked to the IRGC
ANSSI / C4 · Primary source · 9 Nov 2026
Opened the technical government report. It details the 11–12 October event, at least 15 fires, the attribution rationale, related but distinct infrastructure targeting and the Paris investigation.
- France blames Iran for the massive cyberattack on supermarket fridges
The Associated Press · Reporting · 9 Nov 2026
Opened AP’s independent report on the French government’s formal attribution and the scale of the supermarket attack. It corroborates the announcement, not an independent attribution investigation.
- Iran was behind cyber-attack on French supermarket freezers, Paris says
The Guardian · Reporting · 9 Nov 2026
Opened original reporting by Kim Willsher in Paris. It quotes the foreign minister, describes the diplomatic response and distinguishes later incidents whose relationship was not established.
- French prosecutors investigate Iranian group after supermarket-fridge cyberattack
Le Monde · Reporting · 9 Nov 2026
Opened reporting by three Le Monde journalists. It documents the prosecutor’s request for international warrants and clarifies that a smaller next-night attack has not been attributed to the same actors.