France Says Iran Directed Hacks on Retail and Blood Bank Freezers

Two waves of attacks in October and November targeted web-based controllers used to manage industrial cold-storage and freezer units. Hackers remotely raised temperatures, spoiling food and damaging goods. Blood banks were also targeted, but the French Blood Establishment said the attacks were stopped before any blood was spoiled.

Barrot called the operation an attack of “unprecedented scale and aggression,” describing it as the first large-scale act of sabotage on French territory and a major assault on national interests and public security. He said the attacks “will not go without consequences.” France has summoned Iran’s ambassador, plans European-wide sanctions against those responsible, and referred the matter to the French justice system. Iran’s consulate in New York did not immediately respond to a request for comment.

Researchers have warned that the controllers remain vulnerable to remote access. Some affected models made by Danish manufacturer Danfoss no longer receive security updates. The French accusation comes amid other cyberattacks attributed to Iran this year, including intrusions affecting U.S. water providers and medical-device maker Stryker. The U.S. government has linked some attacks to pro-Iranian hacktivists working for Tehran, possibly in response to the U.S.- and Israel-led war against Iran, which killed the country’s supreme leader in February.

U.S. officials are also reportedly examining whether freezer units at military bases were hacked. American authorities have reportedly linked the freezer attacks to Iran, but the intelligence community has not made a formal public attribution.