Shahid Kaveh: Sabotage of Industrial Refrigeration Controllers in France
The French government has attributed a cyberattack on approximately 700 retail sites to the Iranian IRGC-affiliated unit "Shahid Kaveh." The attackers manipulated refrigeration controllers to cause food losses and fires.
Triage facts
Revision 1- Evidence
- Confirmed activeHigh confidence
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 10, 09:37 UTC
- Source quality
- D2Likely
In October 2026, a cyberattack targeting about 700 French retail sites resulted in food losses and at least 20 fires. The attackers gained remote control of Danfoss and Dixell refrigeration controllers via web interfaces. They initiated abnormal, unlimited defrost cycles and disabled safety temperature alerts. The French government attributed the attack to the "Shahid Kaveh" unit of Iran's Islamic Revolutionary Guard Corps (IRGC). The incident is also linked to reconnaissance targeting Schneider Electric equipment at small hydroelectric installations in France.