France Iran Cyberattack: What Paris Claims and What Tehran Denies

The France Iran cyberattack dispute escalated on November 9, 2026, when French Foreign Minister Jean-Noël Barrot accused Iran’s Islamic Revolutionary Guard Corps (IRGC) of sabotaging supermarket refrigeration systems across France in October. According to Al Jazeera, Barrot said the attacks hit more than 700 French supermarkets on October 11 and 12. Paris summoned Iran’s ambassador on November 10 and wants sanctions at the European level, while Tehran denies any role.

The case matters beyond France. It is the first time Paris has publicly tied a large-scale sabotage operation on its own soil to a state security body, and it lands while Iran and the United States remain locked in a confrontation over the Strait of Hormuz and Iran’s nuclear programme.

Why is France blaming Iran for the cyberattack?

Barrot told reporters that the attack was carried out by the IRGC, and described it as the first large-scale cyberattack for sabotage purposes on French territory, Al Jazeera reported. The hackers remotely accessed refrigerators to trigger abnormal, indefinite defrost cycles, forcing stores to discard perishable food, according to the same outlet.

Retailers gave a sense of scale. Al Jazeera reported that Cooperative U said more than 100 of its supermarkets were targeted, Carrefour counted 80 affected stores, and Monoprix said about 5 percent of its roughly 490 stores were hit. One supermarket owner estimated the nationwide cost could reach tens of millions of euros, NBC News reported.

CNBC reported that France attributed the campaign to Shahid Kaveh, a cyber unit it said is affiliated with the IRGC. The Paris prosecutor’s office said investigators concluded the operation was carried out to serve a foreign power, in this case Iran, according to CBS News.

Barrot said France had established the IRGC’s responsibility “with certainty” but would not disclose how, CNN reported. NBC News cited French authorities as saying the hackers used an IP address linked to devices located in Iran. That is the only technical detail in the reporting reviewed here.

What does Iran say, and what remains unproven?

Iran’s Foreign Ministry rejected the accusation on November 10. Reuters, via U.S. News, reported that Tehran called the claims “baseless and hostile.” CNN reported the ministry also argued the allegation was meant to divert public opinion from France’s policies toward Iran.

Reuters noted that Iran routinely denies carrying out malicious cyber operations. Attribution of cyber operations to states is often contested because the evidence can be technical and classified. Until France releases more, or allies publicly corroborate, the attribution rests on the French government’s assertion.

Other incidents add uncertainty. Al Jazeera reported that temperature spikes were recorded on November 2 in stores in Belgium, Estonia, Ireland, Luxembourg and Sweden. CNN said it remains unclear whether those incidents are linked to the French attack. NBC News noted that at least one similar incident in the United States came earlier.

The Pentagon was reported by Reuters, cited by CBC, to be working with French officials on the malfunctions as a suspected cyberattack. U.S. Secretary of State Marco Rubio, who was in Paris for the G7 foreign ministers’ meeting, told reporters the accusation did not surprise him, according to the Latin Times. For the wider G7 context, see this report on Rubio facing allies in Paris.

What can the EU do about the France Iran cyberattack?

France says it will seek sanctions at the European level against those responsible. EU foreign policy chief Kaja Kallas said “our response should be strong,” France 24 reported. EU spokesman Anouar El Anouni said the bloc stands ready for a swift and united response, pending talks with member states, according to CBS News.

The EU already has a cyber sanctions regime, which allows asset freezes and travel bans on listed targets, the French foreign ministry says. In March 2026, member states used it to list the private Iranian firm Emennet Pasargad over earlier cyberattacks and influence campaigns against Charlie Hebdo and the Paris 2024 Olympics.

Listings of that kind normally require unanimity among the 27 member states, and the sources reviewed do not say which governments might hesitate. Barrot also said France “rules nothing out,” and Reuters reported he indicated Paris could respond with cyber measures of its own, with some action not disclosed publicly.

How does this fit the wider Iran confrontation?

Franco-Iranian relations were already strained. Reuters reported that ties improved after detainees were released and France distanced itself from the U.S. war on Iran, but they worsened again over the summer when Iran arrested and expelled two French diplomats and France expelled Iranian diplomats in return.

France had also moved against the IRGC earlier this year. In January 2026, Barrot announced that France would back an EU terrorist listing of the Guards, reversing earlier opposition, Al Jazeera reported.

The accusation also arrives as other Western governments tighten pressure on Tehran. On November 10, Canada reimposed sanctions on 11 Iranian entities tied to nuclear and ballistic missile activity, according to Global Affairs Canada. Separately, the U.S. State Department said on November 6 that it designated eight digital asset service providers accused of helping Iran evade sanctions. For the maritime dimension of the standoff, see Strait of Hormuz news on tankers and U.S. restraint.

What to watch

• An EU proposal: whether Kallas’s office tables a sanctions package, and whether the 27 member states agree on listings tied to Shahid Kaveh or IRGC officials.
• Evidence disclosure: whether France, the United States or other allies publish technical findings supporting the attribution.
• Further incidents: whether investigators link the November 2 disruptions in Belgium, Estonia, Ireland, Luxembourg and Sweden to the French case.
• French countermeasures: whether Paris confirms any cyber or diplomatic step beyond the ambassador’s summons.
• Iran’s response: any retaliatory diplomatic move, such as summoning a French envoy, and its effect on talks with Washington.

Frequently asked questions

Sources

• France accuses Iran of hacking supermarket fridges
• France summons Iran's ambassador over supermarket fridge 'sabotage'
• France accuses Iran of cyberattack on supermarket fridges
• France Summons Iran Envoy Over Supermarket Fridge Hack, Warns of Response
• France blames Iran for 'unprecedented' supermarket fridge cyberattack
• Iran behind France grocery store refrigerator and freezer hacks, prosecutor says
• Live Updates: Rubio says U.S. has "no need" to restart combat operations in Iran
• France accuses Iran's Revolutionary Guards of hacking supermarket refrigerators
• France blames Iran for supermarket refrigerator cyberattacks, weighs sanctions
• France blames Iran for cyberattack that hacked supermarket refrigerators across the country

Top image: Aurore Martignoni / European Union, 2024 / EC - Audiovisual Service / Wikimedia Commons (CC BY 4.0)

This article was produced by the Intelligence Report Desk. Sources are linked below.