France Attributes Massive Cyberattacks on Industrial Freezers to Iran

Image: TechCrunch · Source

France blames Iran's Islamic Revolutionary Guard Corps for large-scale cyberattacks that hacked thousands of industrial freezer units in grocery stores and blood banks, warning of serious national security implications.

The French government has formally attributed a series of significant cyberattacks targeting industrial refrigeration and freezer systems across France and Europe to Iran's Islamic Revolutionary Guard Corps (IRGC). These attacks, occurring in two waves throughout October and early November, compromised thousands of internet-connected industrial cold chain units at grocery stores and retail supermarkets, with intrusions also reported in medical blood banks.

According to the French Blood Establishment, the attacks against blood banks were thwarted before any blood spoilage occurred, but the sabotage of refrigeration systems in food retail aimed to raise temperatures remotely, leading to food spoilage and destruction of goods. The compromised systems include web-based controllers, some manufactured by Danish company Danfoss, which researchers have identified as vulnerable to remote hacking partly due to discontinued security updates.

French Foreign Minister Jean-Noël Barrot described the incident as "an attack of unprecedented scale and aggression," marking it as the first major sabotage event on French national soil and a considerable threat to national interests and public security. He declared that the perpetrators would face consequences and that the matter is under judicial review.

In response to the attribution, France has summoned the Iranian ambassador and announced plans to impose Europe-wide sanctions against those responsible. This follows a pattern of cyber operations attributed to pro-Iranian actors seen earlier this year, including attacks on U.S. water providers and disruptions to medical device manufacturers like Stryker. U.S. authorities are simultaneously investigating potential similar cyberattacks on freezer units within military bases, which they also suspect are linked to Iranian activity, though official confirmation remains pending.

No immediate comment has been issued by Iranian representatives. The French government's statements indicate a heightened state of alert to cyber threats targeting critical infrastructure and underscore international efforts to hold state actors accountable for such digital sabotage campaigns.