France accuses Iran of cyberattacks on grocery freezers and blood banks

The French government has formally blamed Iran for a series of cyberattacks that targeted thousands of internet‑connected industrial refrigeration and freezer units. The incidents hit locations across France and other parts of Europe.

Two waves of attacks took place in October and November, when hackers broke into web‑based controllers that operate cold‑storage equipment in grocery stores and retail supermarkets, raising temperatures to spoil food. The French Blood Establishment said blood banks were also breached but the intrusion was halted before any blood was damaged.

Security researchers warned that the web‑based controllers, including models produced by Danish company Danfoss, are vulnerable to remote hacks and that Danfoss has stopped providing security updates for the affected units. They said the lack of patches leaves the equipment exposed to further intrusion.

In Paris on Monday, foreign minister Jean‑Noël Barrot told reporters, “I am able to confirm that responsibility for this act lies with the Islamic Revolutionary Guard Corps.” He added, “This was an attack of unprecedented scale and aggression; it represents the first large‑scale act of sabotage on our national territory and constitutes a major assault on the nation’s interests and the security of the French people,” and said the hacks will “not go without consequences.”

The French authorities have summoned Iran’s ambassador and announced plans to seek Europe‑wide sanctions against those responsible, with the case now referred to the French justice system. A spokesperson for Iran’s consulate in New York did not respond to a request for comment.

The United States government is also examining whether freezer units on military bases were compromised and has linked similar attacks to Iran, although no formal public attribution has been made.