France blames Iran for fridge cyberattacks, says some caused fires
France attributes cyberattacks on refrigeration systems to Iran's IRGC, causing fires and food loss.
French authorities have attributed a cyberattack targeting approximately 700 grocery stores, which caused significant food loss and at least 15 fires, to Iran's Islamic Revolutionary Guard Corps (IRGC). The perpetrators were identified as part of the Shahid Kaveh unit, previously linked to attacks on U.S. industrial controllers. France has summoned Iran's ambassador and plans to pursue European sanctions against those responsible.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Schneider Electric?
Get an email when a new story names Schneider Electric, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonIran's Islamic Revolutionary Guard Corps (IRGC), through its Shahid Kaveh unit, compromised industrial control systems managing refrigeration in approximately 700 French grocery stores, resulting in widespread food spoilage and at least 15 fires. This attack demonstrates that operational technology (OT) and industrial control systems (ICS) connected to networks are high-value, high-impact targets for nation-state actors. The fact that a known threat actor unit — previously linked to attacks on U.S. industrial controllers — was able to replicate similar attacks in France underscores the failure to apply lessons learned from prior incidents. When ICS/OT systems are insufficiently isolated from external networks and lack robust monitoring, adversaries can cause real-world physical harm, including fires and economic loss. This incident is a stark reminder that cyber threats to critical infrastructure are no longer theoretical — they carry tangible, dangerous consequences.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — CyberAv3ngers