France Accuses Iran IRGC Cyberattacks: Supermarket Sabotage Investigated

• France has formally accused Iran's Revolutionary Guard Corps (IRGC) of "unprecedented" cyberattacks on French supermarket refrigeration systems in October.
• The attacks caused widespread food spoilage across 700 French supermarket sites and similar incidents were reported in at least nine other European countries.
• The Paris prosecutor has opened a judicial investigation targeting the head and two deputies of the IRGC-affiliated Shahid Kaveh cyber unit.
• France has summoned the Iranian ambassador and vowed to implement EU-level sanctions against those responsible for the cyberwarfare.
• Foreign Minister Jean-Noel Barrot described the incident as the first large-scale cyberattack aimed at sabotage on French territory.

This attack is unprecedented in both its scale and its level of aggression, marking the first large-scale cyberattack aimed at sabotage on our national territory.

French authorities have officially accused the Islamic Revolutionary Guard Corps (IRGC) of Iran of orchestrating a series of "unprecedented" cyberattacks that targeted supermarket refrigeration systems across France last month. These sophisticated digital incursions, which took place on October 11 and 12, led to a critical rise in temperatures within supermarket fridges. The disruption was severe enough to compel numerous retailers to dispose of their entire inventories of perishable food items, resulting in significant financial losses and operational challenges.

Foreign Minister Jean-Noel Barrot unequivocally confirmed the involvement of the Islamic Republic of Iran's Revolutionary Guard Corps in these incidents. He characterized the attacks as unparalleled in both their extensive reach and their aggressive nature. Barrot emphasized that this represented the first large-scale cyberattack specifically designed for sabotage on French national territory, posing a substantial threat to the nation's interests and the safety of its citizens. The minister highlighted that approximately 700 French supermarket locations were affected by these coordinated cyberattacks.

In response to these severe digital assaults, the Paris prosecutor's office has initiated a judicial investigation into an Iranian cyber unit with direct ties to the IRGC, Iran's primary ideological military force, which also maintains a dedicated cyberwarfare division. Prosecutor Laure Beccuau announced that the inquiry specifically targets the leader of the Iranian group Shahid Kaveh, an offensive cyber unit operating under the umbrella of the IRGC's Electronic and Cyber Centre (IRGC-CEC), along with two of his deputies and any other individuals who may be identified during the course of the investigation.

This formal legal action underscores the gravity with which France accuses Iran IRGC cyberattacks. In a further diplomatic move, France summoned the Iranian ambassador to Paris to convey a "very strong protest" regarding what it described as an "extremely grave act." French officials have indicated their readiness to implement all necessary and proportionate measures, both publicly and covertly, to address this incident and deter any future attempts to replicate such disruptive actions.

The scale and nature of these cyberattacks, particularly their focus on critical infrastructure like food supply chains, have prompted a strong international reaction and calls for unified action. While Foreign Minister Barrot's statements primarily focused on the attacks within France, similar incidents affecting freezer systems were reported in grocery stores across at least nine other European nations on November 2, suggesting a broader, coordinated European supermarket cyberattack. This wider impact highlights the potential for state-sponsored cyberwarfare to disrupt essential services across the continent.

France has pledged to pursue sanctions at the European level against all entities and individuals deemed responsible for these Iranian Revolutionary Guard Corps cyberattacks. This move signals a concerted effort to impose significant consequences on those involved in the Shahid Kaveh cyber unit investigation. EU foreign policy chief Kaja Kallas, upon learning of the attribution to Iran, stressed the importance of a "strong" collective response. The ongoing investigation into the IRGC Electronic and Cyber Centre and the broader implications for European security underscore the evolving threat landscape posed by state-backed cyber operations, prompting France EU sanctions Iran cyberwarfare discussions.

Compliance officers and legal counsel should monitor the evolving landscape of state-sponsored cyberattacks, particularly those targeting critical infrastructure, and prepare for potential new EU sanctions against Iranian entities or individuals involved in such activities.

Source: Original reporting via Agence France-Presse