France blames Iran for cyberattacks on supermarkets and threatens with harsh measures.

A cyberattack targeting the cooling systems of approximately 700 supermarkets in France resulted in thousands of frozen products being discarded, estimated to have caused tens of millions in damage. The French Foreign Minister announced that a cyber warfare unit of the Islamic Revolutionary Guard Corps, the Shahid Kaveh group, was responsible for this attack and announced European sanctions against Iran, including entry bans and asset freezes. This action followed prior incidents where Iranian cyberattacks targeted French institutions, such as the websites of "Charlie Hebdo" in 2020 and 2023, and attacks on Israeli infrastructure. The Shahid Kaveh group is linked to Hamid Reza Lashgarian and has been implicated in other cyberincidents involving Israeli railway display boards and municipal water systems in the US. French prosecutors are investigating Lashgarian and two others for forming a criminal organization and property damage, with the investigation noting attackers used Farsi and originated from Iran.

The narrative presents a convergence of tangible economic harm—food waste—with geopolitical conflict, framing a specific group as an aggressor against Europe through digital means. The pattern involves the linkage of non-state actors operating under a state umbrella (the IRGC) to inflict material damage across borders. The simultaneous focus on historical Iranian cyberactivity suggests a recurring operational pattern rather than isolated incidents; the reference to previous hacks on media outlets and infrastructure implies a sustained campaign against perceived adversaries, which shifts the context from simple criminal hacking to state-sponsored digital conflict. The immediate reaction by France, invoking sanctions, signals an attempt to use external political leverage to address the security breach, even while acknowledging potential internal friction with Iran over human rights issues. The ongoing ambiguity regarding subsequent attacks on other European countries introduces a layer of uncertainty, suggesting that attributing all digital events definitively to a single source is complex, but the persistence of naming Shahid Kaveh reinforces an established pattern of association that demands scrutiny regarding attribution versus capability.