- 1The Paris prosecutor's office said Monday that the October refrigeration hacks were carried out to serve Iran.
- 2Prosecutors said the Oct. 11 attack hit 700 retail locations in France, causing food spoilage and roughly twenty fires.
- 3CBS News reports similar hacks later affected supermarkets in Belgium, Luxembourg and Sweden.
- 4Officials have not said all incidents, including U.S. base outages in August, are connected.
The French government has formally blamed Iran for cyberattacks on refrigeration systems. Paris prosecutors said Monday that investigators concluded the October grocery store refrigeration hacks were "carried out to serve a foreign power — in this case, Iran," according to CBS News. The prosecutor's office pointed to a cyber unit of Iran's Islamic Revolutionary Guard Corps. Iran's response is not given in the source material available to us.
Paris prosecutors said the Oct. 11 attack caused significant food spoilage and roughly twenty fires. TechCrunch reports security researchers warned the web-based controllers are vulnerable to remote hacks and some Danfoss models no longer receive security fixes. The attribution is the account of the French government and prosecutors.
What officials say happened
According to the Paris prosecutor's office, the Oct. 11 attack hit major supermarket chains at "700 retail locations across France." The office said it caused "significant food spoilage and triggered roughly twenty fires" as temperatures in refrigeration units rose. CBS News reports that similar hacks affected supermarkets in Belgium, Luxembourg and Sweden weeks later.
TechCrunch reports that hackers remotely broke into web-based controllers managing industrial cold and chilling units and raised temperatures to spoil goods. It describes two waves, through October and into November. Blood banks in France were also targeted; the French Blood Establishment said the attacks were stopped before any blood was spoiled, per TechCrunch. CBS News likewise reports that the blood bank products and samples were not damaged.
Separately, French foreign minister Jean-Noël Barrot told reporters in Paris on Monday, as quoted by TechCrunch:
I am able to confirm that responsibility for this act lies with the Islamic Revolutionary Guard Corps.
The device weakness and the open questions
TechCrunch says security researchers have warned that the web-based controllers are vulnerable to remote hacks, and that some affected models made by Danish company Danfoss no longer receive security fixes. The sources do not say how the attackers gained access in each case.
The Paris prosecutor's office said its cybercrime division opened a judicial investigation on charges including fraudulent interference with an automated data-processing system. CBS News also reports that refrigeration outages at six U.S. military bases in August are under investigation by the Department of the Army Criminal Investigation Division, according to Thomas Hamilton, a public affairs officer for the Department of the Army. CBS notes that officials in France, the U.S. and other affected European countries have not asserted that all of the incidents are connected.
TechCrunch places the French attribution among other destructive cyberattacks tied to Iran this year, including hacks on U.S. water providers and disruption at medical device maker Stryker. It says the U.S. government linked those to pro-Iranian hacktivists working for Tehran, likely in response to the U.S.-Israel-led war against Iran that killed its supreme leader in February.
- Sites hit in the Oct. 11 attack, per Paris prosecutors
- 700 retail locations across France
Reported from 2 published sources (TechCrunch, CBS News). Facts, figures and quotes come only from those sources. Drafted with AI assistance and run through an automated fact and legal review.
Benjamin Scott covers technology and the money behind it: artificial intelligence, chips, software platforms and the markets that price them. His analysis tests company claims against what is actually new, explains why investors care and shows who ends up absorbing the cost. Benjamin is an AI editorial persona of Oppositioner; before this desk, his byline covered law, politics and world affairs. His articles are prepared with AI assistance and checked by Oppositioner's automated editorial review before publication.
Spotted an error? Contact the editor. OPPOSITIONER corrects confirmed errors and notes every correction. Read our editorial standards and corrections policy.
