Story no.41OngoingCyberSeriousMaine-et-Loire +324 Oct → 12 Nov39 facts · 199 art.
Cyberattacks attributed to Iran against connected equipment in France
In October, hundreds of connected refrigerators in French supermarkets were targeted by a cyberattack that France attributed to Iran, notably the Islamic Revolutionary Guard Corps; Tehran rejected the accusations as 'unfounded'. On November 10, the Paris prosecutor's office issued international arrest warrants against the leader of an Iranian cyber group linked to the Islamic Revolutionary Guard Corps, while Jean-Noël Barrot stated that France 'does not rule anything out' and announced sanctions. A report from the Centre de coordination des crises cyber revealed that Schneider Electric equipment at French hydroelectric installations had also been attacked at the same time as the refrigerators. Experts and the European cybersecurity agency warned of the vulnerability of other connected devices, such as routers, heaters, and air conditioners. Retailers reported disrupted processes, with Michel-Édouard Leclerc advocating for better 'digital hygiene'.
In brief
Ongoing story bringing together 39 events nationwide, followed from 24 October 2026 to 12 November 2026. 199 articles from 40 sources (cyber); last updated on 12 November 2026 at 08:58.
168 articles of rated outlets · 31 unrated outside the bar · 40 sources (199 art.) · the three sides talk about it · outlets: left 7, centre 20, right 6
Angle comparison for the whole story
The three sides cover the attribution of the cyberattack to Iran and the opening of an investigation, but diverge on the angle: the left emphasizes the Shahid Kaveh unit and the geopolitical scope, the center focuses on practical consequences and the vulnerability of connected devices, the right on the French response, sanctions, and the scale of infrastructure flaws.
Left
Highlights the precise identification of the Shahid Kaveh cyber unit of the Islamic Revolutionary Guard Corps, the French diplomatic and judicial response, as well as the dimension of hybrid warfare extended to Europe; also relays the Iranian denial.
Centre
Focuses on the concrete consequences for retailers and consumers, the warnings from the European cybersecurity agency, and the vulnerability of connected household appliances.
Right
Emphasizes the French response (international arrest warrants, summoning of the ambassador, European sanctions) and extends to broader flaws in industrial and energy infrastructure, while also relaying the Iranian denial.
Written by an AI from headlines and extracts only of all events in the story · 12 Nov, 09h13
Confirmed by several sources(8)
- 11
France officially attributed on November 9 to Iran, via the Shahid Kaveh unit linked to the Islamic Revolutionary Guard Corps, the October cyberattack.
11 independent sourcesNice-Matin, Sud Ouest, 20 Minutes, Ouest-France, Le Monde +7
- 8
Juhan Lepassaar, head of the European cybersecurity agency, warned that household appliances could be the next target.
8 independent sourcesEurope 1, Nice-Matin, BFMTV / RMC, Libération, Le Parisien +3
- 7
Jean-Noël Barrot stated that France 'does not rule anything out' and will take all measures deemed proportionate, including non-public ones.
7 independent sourcesCNews, Nice-Matin, Sud Ouest, Midi Libre, Ouest-France +3
- 6
The attack targeted around 700 French supermarket sites in October, targeting connected refrigeration controllers.
6 independent sourcesMidi Libre, 20 Minutes, L'Opinion, Europe 1, Le Dauphiné libéré +4
- 5
Iran rejected France's 'unfounded accusations' and denied any involvement.
5 independent sourcesLe Monde, Le Figaro, Europe 1, franceinfo, Le Parisien
- 3
France summoned the Iranian ambassador to Paris.
3 independent sourcesCNews, Nice-Matin, Le Monde, Europe 1
- 2
- 2
The Paris prosecutor's office opened an investigation targeting Shahid Kaveh, and investigating judges were tasked with investigating on November 9.
2 independent sourcesOuest-France, France 24
Single source so far(2)
- French justice requested international arrest warrants against three officials of the Shahid Kaveh unit. (according to Europe 1)
- The European Union said it was ready for a 'rapid and united' response, according to Anouar El Anouni. (according to Ouest-France)
Updates(8)
- 12 Nov, 00h35Summoning of the Iranian ambassador to Paris carried out (previously announced).
- 11 Nov, 21h07According to Europe 1, the requested international arrest warrants target three Shahid Kaveh officials, not only its leader.
- 11 Nov, 16h40The hacking also affected cold rooms of the French Blood Establishment, according to La Croix.
- 11 Nov, 00h40The European Union says it is ready for a 'rapid and united' response.
- 11 Nov, 00h40Iran officially rejects France's accusations on November 10.
- 11 Nov, 00h40International arrest warrants are issued against the leader of the Iranian cyber group on November 10.
- 10 Nov, 01h06France moves from suspicions about Iran to an official accusation and the opening of a judicial investigation on November 9.
- 10 Nov, 01h06The wave of attacks extended from several European countries on November 2 to a dozen countries on November 3.
AI cross-check of the headlines and extracts of 60 articles (28 outlets) · “confirmed” = reported by at least two independent outlets · 12 Nov, 08h14
Context and reference points, separate from the story's news. Every item links to its source; updated on 11 Nov
Reference points
- On April 8, 2019, the United States listed the Islamic Revolutionary Guard Corps on its list of organizations considered terrorist by the State Department. Wikipédia
- On January 19, 2023, the European Parliament asked the Council of the European Union to list the Islamic Revolutionary Guard Corps, the Quds Force, and the Basij as terrorist organizations; this resolution was not adopted by the Council, but 18 individuals and 19 entities were sanctioned. Wikipédia
- On January 29, 2026, the European Union decided to list the Islamic Revolutionary Guard Corps as a terrorist organization, following the United States, Canada, and Australia. Wikipédia
Key terms
- International arrest warrant
- Commonly used expression to designate a red notice, an international alert message issued by Interpol at the request of a police service to locate and arrest a person wanted by a national jurisdiction or an international tribunal, with a view to extradition; each member country decides the value it attaches to it. Wikipédia
- Islamic Revolutionary Guard Corps
- Paramilitary organization of the Islamic Republic of Iran reporting directly to the Supreme Leader, tasked under the Iranian constitution with protecting the Khomeinist ideology and the system of the Islamic Republic. Wikipédia
- International sanctions
- Decisions taken by states and organizations such as the United States, the European Union, or the UN against other states, entities, or individuals, for essentially political reasons, unilaterally or multilaterally; they may be diplomatic, economic, or military in nature. Wikipédia
What happens next?
What usually happens in this kind of situation — without prejudging the outcome.
- As a rule, a red notice issued by Interpol at the request of a police service aims to ask counterparts worldwide to locate and arrest a wanted person, each member country remaining free to arrest and extradite or not the individual according to its own procedures. Wikipédia
- As a rule, international sanctions can be adopted unilaterally by states such as the United States or by the European Union, or multilaterally within the UN framework. Wikipédia
Useful resources
Cybermalveillance.gouv.frcybermalveillance.gouv.fr
Assistance to victims of scams and cyberattacks.
Timeline
newest firstOutlets:LeftCentreRightUncategorised· badge = severity
- 17h44
La France ciblée par des cyberattaques et manœuvres hybrides étrangères
La France fait face à des cyberattaques, dont celles visant des réfrigérateurs connectés, et à des alertes à la bombe attribuées à des acteurs étrangers comme l'Iran. Ces manœuvres de déstabilisation touchent aussi d'autres démocraties occidentales.
La CroixCentre
- 14h05
Appareils connectés : le risque de piratage à domicile
Des experts en cybersécurité alertent sur la vulnérabilité des appareils connectés des particuliers et livrent des conseils de protection.
TF1 Info / LCICentre
- 10h32
Cyberattaque des frigos : Michel-Édouard Leclerc plaide pour une « hygiène numérique »
Michel-Édouard Leclerc réagit à la vague de cyberattaques visant les réfrigérateurs connectés de supermarchés et appelle à une meilleure hygiène numérique.
Le ParisienCentre
In figures
Affected departments
Reported toll
Amounts citedplusieurs centaines de milliers d’euros · 250 millions d’euros · des dizaines de millions d'euros
Highest number recorded in 3 article(s), automatically extracted: please check sources.
Further reading
People cited
Organisations cited
Places cited
Go up the thread
Events in the story
- Cyberattaque des frigos : Dominique Schelcher évoque des process toujours perturbés12 Nov
- Après les supermarchés, les appareils ménagers possibles prochaines cibles de cyberattaques12 Nov
- Un haut responsable européen alerte sur les cyberattaques visant les appareils ménagers11 Nov
- Qui est Shahid Kaveh, groupe cyber iranien soupçonné d'avoir visé des frigos de supermarchés11 Nov
- Appareils connectés : le risque de piratage à domicile11 Nov
- Cyberattaque des frigos de supermarchés : la France accuse officiellement l'Iran11 Nov
- La France ciblée par des cyberattaques et manœuvres hybrides étrangères11 Nov
- Après la cyberattaque des frigos, l'agence européenne alerte sur les objets connectés11 Nov
- Cyberattaque des frigos : Paris ne « s'interdit rien » contre l'Iran11 Nov
- Cyberattaque des frigos : Michel-Édouard Leclerc plaide pour une « hygiène numérique »11 Nov
Affected departments