Paris considers sanctions and summons Iran’s ambassador
France is considering European entry bans and asset freezes in response to cyberattacks that damaged supermarket refrigeration systems in October, Foreign Minister Jean-Noël Barrot said Tuesday, Nov. 10. Speaking to Franceinfo, Barrot said the government was not excluding any response as it sought to deter further malicious activity against the region, according to CNBC.
French authorities summoned Iran’s ambassador Tuesday morning after announcing their attribution of the attacks on Monday. Paris said investigators had identified Shahid Kaveh, an affiliate of the cyber unit of Iran’s Revolutionary Guard Corps, as responsible. The government also said it would propose new European sanctions against Iranian individuals and entities involved. Those measures remained proposals rather than announced penalties.
Refrigeration sabotage caused widespread retail damage
The attacks struck around 700 grocery stores overnight between Oct. 11 and Oct. 12. Remote interference caused refrigerators and freezers to heat up by as much as 50 degrees Celsius, spoiling food and triggering fires. CNBC reported damage amounting to tens of millions of dollars. Retailers targeted included Intermarché, E. Leclerc, Carrefour, Monoprix and Coopérative U.
According to the Paris prosecutor’s account, attackers accessed refrigeration controllers supplied by Danfoss and Dixell through web interfaces. They initiated unrestricted defrost cycles and disabled sensor alerts intended to activate when temperatures crossed a specified threshold. That combination interfered with both cooling operations and the warnings designed to flag dangerous temperature changes.
Investigators seek warrants as France alleges state-backed sabotage
Paris chief prosecutor Laure Beccuau said the prosecutor’s office was seeking international arrest warrants. Investigators reported finding the use of Farsi and internet protocol addresses associated with devices in Iran. The prosecutor’s statement said the attacks had been carried out to serve a foreign power, which it identified as Iran. These findings form part of the French authorities’ attribution; CNBC’s report did not provide an Iranian response.
France’s Ministry for Europe and Foreign Affairs characterized the operation as unprecedented in its scale and aggressiveness, and as the first cyber campaign on French territory conducted solely for sabotage. It described the actor as a continuing threat to critical infrastructure and said the attacks violated international law. CNBC said it had contacted the Iranian government for comment.
Other European stores and French blood storage affected
Further attacks on supermarket refrigerators were reported in November across Belgium, Luxembourg, the Netherlands, Finland, Ireland and Sweden, with stores reporting losses. French blood banks were also affected by cybersecurity attacks on Nov. 2, according to the French Blood Establishment, known as EFS. The supplied account does not establish that those incidents were carried out by the group France blamed for the October supermarket attacks.
EFS said temperature and defrost settings had been raised excessively in cold-storage units holding blood products and samples intended for healthcare facilities and biobanks. CNBC translated the organization’s statement from French. The report did not specify the volume of material affected or quantify losses from the blood-storage incident, leaving its operational impact unclear.
Infrastructure exposure becomes a wider concern
France has previously attributed attacks on Charlie Hebdo in 2023 and cyberattacks and information-manipulation campaigns targeting the 2024 Paris Olympics to Iran-based actors. Those incidents led to sanctions against the private Iranian company Emennet Pasargad in March 2026. The latest diplomatic and legal steps therefore build on an existing sanctions response, although the new targets and the timing of any additional European measures remain unresolved.
The refrigeration incidents come amid separate hoax bomb threats that have forced dozens of passenger flights into emergency landings. Simon Edwards, chief executive of cybersecurity testing laboratory SE Labs, told CNBC that disruption of essential services could be intended to intimidate European governments or signal capabilities for larger operations. He also questioned why refrigeration equipment was internet-accessible without passwords, presenting weak basic security as a key vulnerability. His interpretation does not establish a connection between the aviation threats and refrigeration attacks. For businesses, the documented food spoilage, fires and equipment interference demonstrate how cyber incidents can translate directly into physical losses and disruption rather than remaining confined to data systems.
Source: CNBC