In the middle of the night, supermarket freezers across France quietly stopped cooling and began heating up. By morning, shop workers were dumping piles of spoiled meat and melted ice cream into rubbish bins, and in some locations, refrigeration units had been driven to such high temperatures that they caught fire. The disruptions, which hit approximately 700 retail sites including butcher shops and grocery chains, turned routine mechanical appliances into instruments of physical sabotage.
French authorities, led by the national cybersecurity agency ANSSI and Foreign Minister Jean-Noël Barrot, attributed the October campaign to Shahid Kaveh, a cyber unit linked to Iran's Islamic Revolutionary Guard Corps. Barrot called the incident the country's first large-scale cyberattack aimed at domestic sabotage, prompting the Paris Prosecutor's Office to seek international arrest warrants. Yet cybersecurity analysts noted that the intrusion itself was strikingly rudimentary: attackers gained access to cooling controllers largely by exploiting default passwords left unchanged by operators.
The French incident is part of an escalating pattern of attacks targeting mundane commercial infrastructure. In recent months, similar defrosting incidents have struck grocery stores in Sweden and Ireland, spoiled food at U.S. military commissaries, and disrupted an Israeli food processing plant. In France, staff at a major blood bank recently had to scramble to rescue temperature-sensitive supplies after their refrigeration controls were compromised.
While major cyber espionage campaigns typically focus on data theft and sensitive networks, these attacks demonstrate how hostile actors can project power by disrupting civilian supply chains. Without relying on sophisticated exploits, attackers manipulated basic systems to ruin millions of dollars' worth of food—a stark demonstration that everyday digital oversights can quickly spill into the physical world.