France's foreign minister has publicly blamed Iran for launching at least two waves of cyberattacks targeting industrial refrigerated and freezer units. The attacks struck grocery stores and blood banks across France and wider Europe, according to the minister. The accusation marks a significant escalation in the attribution of the campaign.
The cyberattacks targeted the industrial cooling systems that keep food and medical supplies at safe temperatures. By compromising these units, attackers could potentially cause spoilage, disrupt supply chains, and endanger public health. The targeting of blood banks is particularly alarming given the critical nature of those facilities. The minister said the attacks came in at least two separate waves, striking grocery stores and blood banks in France and beyond its borders.
The French government's decision to name Iran represents a strong diplomatic statement. Attribution of cyberattacks is often difficult and politically sensitive, and public accusations can carry significant consequences. The move suggests that French authorities have gathered evidence they consider convincing. Paris has not disclosed the specific evidence behind its conclusion, and the public blame game carries risks, given that Tehran has consistently denied involvement in such operations in the past.
The attacks are part of a broader pattern of cyber aggression that has targeted critical infrastructure across Europe. The incident highlights the vulnerability of industrial control systems to state-sponsored hacking. It also raises questions about how governments and companies can better protect essential systems from increasingly sophisticated threats. For now, the French accusation stands as one of the most direct public attributions of a cyber campaign against European civilian infrastructure, and it is likely to sharpen debate in Brussels and other European capitals over how to respond to state-linked hacking.