France blames IRGC-linked unit for attacks on 700 supermarket fridges
Original title: France Blames Iranian Hackers for Hijacking Refrigeration Systems at 700 Supermarkets via Remote Defrost Controls
Remote defrost changes at Système U, Intermarché and E.Leclerc on October 11–12 caused food losses and about 20 fires.
France attributes a refrigeration-control attack on about 700 supermarket sites to Shahid Kaveh, an offensive cyber unit it links to the IRGC. Attackers reached Danfoss, Dixell and Copeland systems through web interfaces, ran unlimited defrost cycles and disabled temperature alerts. Foreign Minister Jean-Noël Barrot confirmed the attribution on November 9; France summoned Iran’s ambassador and said it would seek European sanctions. The entry method is publicly unconfirmed.
Unconfirmed: French officials attribute the attack to Shahid Kaveh, but the exact entry method and any use of the Danfoss AK-SM 800A weakness are unconfirmed.
- Prosecutors are investigating Shahid Kaveh’s leader, two deputies and unidentified others.
- Investigators cite the unit’s attack pattern, Farsi and Iran-linked IP addresses.
- A known Danfoss AK-SM 800A authentication weakness has not been tied to the attack.
- ANSSI says similar blood-service incidents were not attributed to this attacker.
Impact: Disrupted refrigeration, food losses and about 20 fires
| Product | Affected |
|---|---|
| Danfoss refrigeration controls | — |
| Dixell refrigeration controls | — |
| Copeland refrigeration controls | — |
- 1.Remove refrigeration control interfaces from public internet access.
- 2.Install supported updates, replace default passwords and restrict remote maintenance.
- 3.Review defrost schedules, accounts and alerts before restoring connectivity.
- Products
- Danfoss AK-SM 800A
- Threat actors
- Shahid KavehIslamic Revolutionary Guard Corps
From the original article
2 min read at cybersecuritynews.com
France has blamed Iran’s Islamic Revolutionary Guard Corps for a cyberattack that disrupted refrigeration at around 700 supermarket sites. During the night of October 11–12, 2026, attackers changed cooling controls remotely, causing major food losses and around 20 fires, according to the Paris prosecutor’s office. Foreign Minister Jean-Noël Barrot confirmed the attribution on November 9, […]
By Kavichselvan · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.