State-Sponsored Sabotage: France Formally Blames Iran for Mass Hacks Targeting Supermarket Freezers and Blood Banks

The French government formally attributed a series of destructive cyberattacks targeting thousands of internet-connected industrial freezers and refrigeration units across France and broader Europe to threat actors linked directly to Iran. The intrusions targeted critical cold chain systems operating inside commercial grocery chains, retail supermarkets, and medical blood storage facilities. The official statement marks a major escalation as government officials classify digital attacks against physical infrastructure as deliberate national sabotage.

The attack campaign adds to a growing series of destructive cyber operations tied to Iranian state hackers this year. Previous incidents hit United States water providers and caused major operational disruptions across medical device manufacturer Stryker. United States intelligence officials linked the infrastructure incursions to pro-Iranian hacktivist groups operating under Tehran’s direction, assessing the moves as retaliation for regional military conflicts.

Two distinct attack waves hit target networks throughout October and November. Malicious actors gained unauthorized entry to web-based management controllers that regulate fleets of industrial cold storage units across retail food markets, changing temperature setpoints to spoil fresh inventory and destroy perishable produce. Hackers also breached computer systems controlling refrigerated storage at medical blood banks. However, facility monitoring teams detected the intrusions and contained the threat before any donated blood supplies were ruined, according to official updates from the French Blood Establishment.

Security analysts warn that many internet-connected temperature controllers lack basic defensive protections. Investigators found that multiple breached facilities ran legacy web-based control units manufactured by Danish cooling firm Danfoss. Danfoss no longer issues software security updates or patches for these older model controllers, leaving unmonitored systems exposed to direct web access and automated exploit attempts.

French Foreign Minister Jean-Noel Barrot confirmed the government’s stance during a press conference in Paris, stating that responsibility for the cyber sabotage lies directly with the Islamic Revolutionary Guard Corps. Barrot described the intrusions as a large-scale act of aggression and sabotage carried out against domestic national territory. He added that French authorities summoned Iran’s ambassador to deliver a formal protest while pushing for European Union sanctions against the individuals and organizations responsible for the attacks. The matter has been formally handed over to the French judicial system for criminal prosecution.

Concurrently, United States intelligence agencies are investigating whether similar hacking activity impacted refrigeration systems operating on domestic military bases. While American officials privately link military freezer disruptions to Iranian state actors, federal agencies have not issued a formal public attribution.

The incident highlights how vulnerable essential physical systems remain when connected to open web networks. Attacking commercial food supplies and blood banks demonstrates a dangerous willingness by state actors to target civilian infrastructure directly. Protecting critical cold storage requires facility managers to audit network settings, disconnect unpatched hardware from the public internet, and isolate industrial controls behind private network security barriers.