France Blames IRGC: Supermarket Cyberattack Caused Widespread Damage

• Hundreds of French supermarkets experienced a cyberattack on October 11 and 12, causing refrigeration systems to fail and leading to significant food spoilage.
• France has officially blamed Iran's Islamic Revolutionary Guard Corps (IRGC) for the incident, describing it as an unprecedented act of large-scale cyber sabotage.
• The Paris prosecutor has opened an investigation into the IRGC's Shahid Kaveh cyber unit and requested international arrest warrants for two of its officials.
• Iran has rejected the accusations as baseless, while the European Union plans a united response, potentially including sanctions under its cyber diplomacy toolbox.
• Similar cyber incidents were reported in at least 11 other European countries in early November, highlighting a broader threat to commercial infrastructure.

French Foreign Minister Jean-Noel Barrot declared that Paris considers this the first large-scale cyber sabotage of its kind on French territory, describing it as "unprecedented in both its scale and its level of aggression."

On October 11 and 12, a significant cyberattack disrupted hundreds of French supermarkets, specifically targeting their refrigeration and freezer systems. The sophisticated intrusion manipulated cooling mechanisms through web interfaces, initiating "abnormal, indefinite defrost cycles" and deactivating crucial sensor alerts. This widespread sabotage led to a substantial increase in temperatures within the affected units, compelling numerous retailers to discard their entire stocks of perishable food items. The incident impacted approximately 700 sites across France, causing considerable commercial losses.

The scope of this cyber operation extended beyond France, with similar disruptions reported in at least eleven other European nations in early November. This series of events highlights a growing vulnerability in commercial infrastructure to state-sponsored cyber warfare, demonstrating the potential for significant economic damage and supply chain disruption through digital means. The nature of the attack, focusing on critical operational systems, underscores an escalating threat landscape for businesses.

In response to the widespread digital assault, France has formally attributed the cyberattack to Iran, specifically identifying the Islamic Revolutionary Guard Corps (IRGC) as responsible. French Foreign Minister Jean-Noel Barrot declared that Paris considers this the first large-scale cyber sabotage of its kind on French territory, describing it as "unprecedented in both its scale and its level of aggression." Barrot affirmed that France would "rule nothing out" in its response, including undisclosed measures deemed proportionate and necessary to deter future attacks, aiming to dissuade any potential perpetrators, whether in Iran or elsewhere.

The Paris prosecutor, Laure Beccuau, has initiated an investigation into Shahid Kaveh, a cyber unit linked to the IRGC. This shadowy entity is characterized as an "offensive cyber unit affiliated with the Electronic and Cyber Center of the Islamic Revolutionary Guard Corps (IRGC-CEC)." As part of this inquiry, the prosecutor's office has sought international arrest warrants for two officials associated with Shahid Kaveh. France's Center for Coordination of Cyber Crises, which includes intelligence services, noted that this unit typically conducts extensive campaigns targeting industrial equipment for sabotage, primarily against the United States and Israel, but also extending to France and other European countries.

Following France's accusations, Iran's foreign ministry promptly rejected the claims as "baseless," condemning what it termed a "hackneyed policy of levelling accusations against the Islamic republic." The Iranian ambassador was summoned by the French foreign ministry's secretary-general to address the allegations. Meanwhile, the European Union indicated its intention to formulate a "swift and united response" after discussions with member states. An EU spokesperson, Anouar El Anouni, reiterated the bloc's consistent call for all states to abstain from malicious cyber activities, affirming that the EU would utilize all available instruments, including sanctions under its "EU cyber diplomacy toolbox," to counter such behavior.

This incident unfolds amidst a broader geopolitical backdrop, including a warning from Sweden's civil defense minister about an expected increase in cyber incidents, partly due to AI tools simplifying vulnerability detection. French officials have also accused Iran of disseminating misinformation related to recent protests in France. Although European nations did not participate in a conflict between the United States and Israel with Iran, which reportedly began with the killing of Supreme Leader Ali Khamenei on February 28, the supermarket cyberattack underscores the growing threat of state-sponsored cyber warfare and its commercial impact on critical infrastructure.

This incident underscores the escalating threat of state-sponsored cyberattacks targeting commercial infrastructure, necessitating heightened vigilance from compliance officers regarding supply chain vulnerabilities and potential new sanctions regimes. Lawyers should advise clients, particularly those in critical sectors, to review cyber resilience strategies and monitor international legal responses, including the potential for asset freezes or trade restrictions.

Source: Original reporting via AFP