France signals tough response after blaming Iran for mass supermarket fridge hacks

What happened

A coordinated set of remote break ins hit roughly 700 supermarkets overnight between Oct. 11 and Oct. 12. Investigators say attackers accessed web interfaces for refrigeration controllers made by Danfoss and Dixell, then ran continuous defrost cycles while turning off safety alerts intended to trigger when temperatures exceed set limits.

Reports say temperatures spiked up to 50 degrees Celsius, destroying inventory and sparking fires, causing damages totaling tens of millions of dollars. The wave also swept through major banners, from Intermarché to Coopérative U, with E. Leclerc, Carrefour and Monoprix counted among those affected. In November, stores in Belgium, Luxembourg, the Netherlands, Finland, Ireland and Sweden also reported incidents.

According to the Paris Prosecutor's Office, investigators noted the presence of Farsi and IP addresses that traced to equipment in Iran, leading them to assess the operation served a foreign power identified as Iran. Paris chief prosecutor Laure Beccuau said the office is seeking international arrest warrants.

How officials reacted

France's Ministry for Europe and Foreign Affairs condemned what it called unacceptable cyberattacks by the Islamic Republic of Iran, describing the campaign as unprecedented in scale and aggressiveness and the first cyber offensive conducted solely for sabotage on national territory. The ministry warned the actor poses a persistent threat to critical infrastructure and said the destructive operations violate international law.

Tehran rejected the accusations. In a statement, Iran's Ministry of Foreign Affairs called France's claims "baseless and malicious" and said, "This latest round of allegations - a continuation of previous, repetitive claims - is clearly intended to divert public attention from France's own destructive policies toward Iran and the West Asia region. Such a move is highly irresponsible and contemptible; it is a transparent attempt to tarnish Iran's image and disrupt its relations with other nations." CNBC has reached out to the Iranian government for comment.

New technologies can reshape risks and opportunities for careful long term investors. We're hosting our first ever investor livestream on 11/17 to show you how to use ChatGPT and Claude to invest like a pro, hosted by Briefs Finance CEO Jaspreet Singh. Save your seat.

Wider effects and expert view

The French Blood Establishment said that on Nov. 2 French blood banks came under cybersecurity attacks. The agency said attackers raised the temperature and defrost limits on cold rooms holding blood products and samples intended for healthcare settings and biobanks to excessively high values.

Meanwhile, a spate of fake bomb alerts unsettled Europe, leading dozens of passenger flights to make emergency landings. By email, Simon Edwards, who leads the cybersecurity testing lab SE Labs as CEO, wrote, "It feels like this could be a pretty unsubtle message from hostile actors to European governments warning that..[they] have the capability to interfere with critical infrastructure and disrupt essential services whenever they choose." He added, "Whether this is an attempt to intimidate governments or preparation for something bigger, it shows how vulnerable our infrastructure can be." He also pointed to weak basic cybersecurity hygiene, questioning why internet connected fridges were accessible without passwords.

Earlier, French authorities ascribed operations to Iran-based actors, citing cyberattacks and "information manipulation campaigns" directed at Charlie Hebdo in 2023, and at the Paris Olympics in 2024. Those cases led to March 2026 sanctions against private Iranian company Emennet Pasargad.

What this means for your portfolio

In plain English, this was a real world supply shock delivered over the internet, with direct damage in the tens of millions and broader risks from exposed cold chain systems to potential new sanctions. For investors, that means reassessing exposure to retailers, logistics tech, and industrial control vendors that depend on always on remote access.

Staying curious about evolving tools helps investors find an enduring edge in markets. On 11/17, our CEO Jaspreet Singh goes live for our first ever investor livestream on how to use ChatGPT and Claude to invest like a pro. Register to join him.