France Blames Iran for Hacking 700 Supermarket Freezers to 50C

What happened in the freezer attack

The campaign hit French supermarket chains Casino, Leclerc, Coopérative U, Metro, Carrefour and Intermarché in October 2026.

The mechanics are as mundane as they are alarming. Attackers reached into the temperature-control systems that keep supermarket fridges and freezers running, then turned the dial the wrong way. Temperatures climbed past 50C. Food spoiled. In some stores, fires broke out.

France's Cyber Crisis Coordination Centre (C4) put the damage in the tens of millions of euros. The foreign ministry says the campaign was "unprecedented in both its scale and its level of aggression" and described it as the first cyber offensive carried out purely for sabotage on national territory.

Foreign Minister Jean-Noël Barrot didn't mince words: the attack "constitutes a major attack on the nation's interests and the security of the French people." France has summoned Iran's ambassador in Paris to lodge a formal protest.

From groceries to blood plasma: the campaign widened

The freezer attacks were followed by a second wave against supermarkets in other European countries, then a third targeting French blood plasma reserves.

A few days after the French stores were hit, supermarkets elsewhere in Europe were targeted. Then came the most chilling episode: an attack on Coolworld, a supplier to the French Blood Establishment (EFS), which collects and distributes blood products used in essential surgeries.

This time the temperature spikes were spotted quickly and corrected, so there were no serious operational consequences. That is luck, not resilience. A blood supply chain is exactly the kind of target where a few hours of unnoticed temperature drift can become a life-or-death problem.

The pattern matters more than any single incident. Grocery freezers, then foreign retailers, then medical cold storage. Whoever was behind this was probing how far a simple temperature control could be pushed before anyone noticed.

Why Iran, and why now

France points to the Islamic Revolutionary Guard Corps, which has been linked to a string of industrial and utility attacks in recent months.

The IRGC has been blamed for several high-profile incidents this year. In August 2026, a UK power generation plant was taken offline for days, and more than 30 Minnesota water utilities were hit in a coordinated attack attributed to Iranian-affiliated actors.

Paris says this is not a new adversary. The foreign ministry cited previous destabilizing acts, including targeting the magazine Charlie Hebdo in 2023 and the Paris Olympic Games in 2024.

Iran has not responded officially, though some Iranian media outlets have dismissed the allegations as baseless. That denial will do little to calm retailers now staring at their refrigeration controllers and wondering who else can reach them.

The uncomfortable lesson for retailers

Temperature control systems are operational technology, and operational technology is rarely built with an adversary in mind.

Supermarket refrigeration is part of the same family of industrial control systems that run power plants and water utilities. It is often managed remotely, sometimes by third-party contractors, and usually designed for uptime rather than security.

That makes a freezer a soft target with an outsized effect. You don't need to breach a corporate network or steal customer data. You need access to a thermostat, and the willingness to wreck a few million euros of food.

For retailers, the fix isn't exotic. Segment these systems from the corporate network, monitor for unexpected setpoint changes, and treat a temperature alarm as a security event, not just a maintenance ticket. The French blood service got lucky. The next target might not.

• Segment refrigeration and building-management systems from corporate networks.
• Monitor for unexpected setpoint changes and temperature anomalies.
• Treat temperature alarms as potential security incidents, not just maintenance issues.
• Audit third-party remote access to operational technology.

What it means for you

If you shop at a major European grocer, the practical impact is shelf availability and, potentially, higher prices as chains absorb tens of millions of euros in spoiled stock. There is no indication that customer data was exposed in these attacks.

For businesses in the US, UK and EU running connected refrigeration or building-management systems, the French case is a reminder that operational technology is now a front line. Regulators have been tightening critical-infrastructure rules for years; expect more scrutiny of cold-chain and food-distribution systems after this.

France's accusation raises the stakes for anyone running connected industrial equipment. The attack didn't need malware that steals data or locks files. It just needed access to a temperature setting and a motive to cause damage. That is a cheaper, nastier kind of cyberwar, and it is now part of the record.