Schneider Electric

France Attributes October Supermarket Refrigeration Attacks to Iranian IRGC Unit Shahid Kaveh

France has officially blamed the Iranian state-backed group Shahid Kaveh, part of the IRGC's cyber center, for cyberattacks that hit more than 700 retail locations on October 11-12. Attackers compromised industrial refrigeration controllers and altered defrost settings to high temperatures, leading to widespread food spoilage and at least 15 fires. The incidents affected major chains including Casino, Leclerc, Carrefour, and Intermarché, as well as smaller facilities, resulting in tens of millions of euros in losses. French authorities also linked the same campaign to reconnaissance and limited incidents against Schneider Electric equipment at hydroelectric sites. Attribution relied on infrastructure reuse, FOFA searches, Farsi traces, and early claims on the associated outlet CyberbanNews. France plans to summon Iran's ambassador and push for new EU sanctions while noting a separate November wave remains unattributed.