France attributes mass hacks of supermarket freezer controllers and blood bank cold units to Iran's IRGC
The French government has formally attributed to the Islamic Revolutionary Guard Corps (IRGC) a series of cyberattacks that hit thousands of internet-connected industrial refrigerated and freezer units in France and wider Europe. Two waves in October and November 2026 remotely accessed web-based controllers that manage cold-storage fleets at grocery stores and supermarkets and raised temperatures to spoil food. Medical blood banks were also targeted, but according to the French Blood Establishment the attacks were stopped before any blood was spoiled. French foreign minister Jean-Noël Barrot confirmed responsibility, Paris summoned Iran's ambassador, and France said it would seek European-wide sanctions against those responsible. The U.S. government reportedly links the attacks to pro-Iranian hacktivists working for Tehran, while the U.S. intelligence community has made no formal public attribution.
Detalhes técnicos
- The attackers remotely broke into web-based controllers that manage fleets of industrial cold and chilling units, then raised temperatures to spoil food and destroy goods.
- Security researchers have warned that these web-based controllers are vulnerable to remote attacks, and some affected models made by Danfoss no longer receive security fixes.
- The article gives no CVE identifiers, vulnerable firmware versions, or authentication and access prerequisites, so the exact entry point is not established.
- U.S. officials are reportedly investigating whether freezer units on military bases were hacked, following similar outages earlier in 2026.
Linha do tempo
-
France attributes mass hacks of supermarket freezer controllers and blood bank cold units to Iran's IRGC
ler a análise desta fonte ocultar
The French government has formally attributed to the Islamic Revolutionary Guard Corps (IRGC) a series of cyberattacks that hit thousands of internet-connected industrial refrigerated and freezer units in France and wider Europe. Two waves in October and November 2026 remotely accessed web-based controllers that manage cold-storage fleets at grocery stores and supermarkets and raised temperatures to spoil food. Medical blood banks were also targeted, but according to the French Blood Establishment the attacks were stopped before any blood was spoiled. French foreign minister Jean-Noël Barrot confirmed responsibility, Paris summoned Iran's ambassador, and France said it would seek European-wide sanctions against those responsible. The U.S. government reportedly links the attacks to pro-Iranian hacktivists working for Tehran, while the U.S. intelligence community has made no formal public attribution.
Technical Details
- The attackers remotely broke into web-based controllers that manage fleets of industrial cold and chilling units, then raised temperatures to spoil food and destroy goods.
- Security researchers have warned that these web-based controllers are vulnerable to remote attacks, and some affected models made by Danfoss no longer receive security fixes.
- The article gives no CVE identifiers, vulnerable firmware versions, or authentication and access prerequisites, so the exact entry point is not established.
- U.S. officials are reportedly investigating whether freezer units on military bases were hacked, following similar outages earlier in 2026.