Iran denies involvement in cyberattack targeting French supermarkets
French authorities have accused a group called Shahid Kaveh, allegedly linked to Iran’s Islamic Revolutionary Guard Corps (IRGC), of orchestrating a recent cyberattack that disrupted refrigeration systems in hundreds of French supermarkets. The incident, which occurred October 11-12, impacted approximately 700 commercial sites and resulted in significant food spoilage, costing millions of euros. France’s Foreign Minister Jean-Noel Barrot described the attack as “unprecedented in its level of aggression.”
Iran has vehemently denied any involvement, calling the accusations “baseless and biased” and warning of potential measures to protect its national interests. The Iranian Foreign Ministry condemned the accusations as an attempt to damage Iran’s reputation and harm its international relations.
French intelligence agencies have identified Shahid Kaveh as an “offensive cyberunit” operating under the direction of the IRGC’s cyberelectronic command (CEC). The report names Hamid Reza Lashgarian, reportedly the head of the CEC, and his sons, Mahdi Lashgarian and Reza Salarvand, as key figures within the Shahid Kaveh unit.
Shahid Kaveh appears to be named after Mahmoud Kaveh, an IRGC commander who died in 1986. Western intelligence agencies believe the group is part of a network of hackers operating on behalf of Tehran. The group reportedly uses front organizations, such as “CyberAveng3rs” and “Cyber Isnaad Front,” to claim responsibility for attacks carried out by Shahid Kaveh.
Two of the individuals identified by French intelligence – Hamid Reza Lashgarian and Mahdi Lashgarian – have previously been sanctioned by the United States for alleged connections to the IRGC’s cyber operations. Experts note that Iran has significantly increased its cyber operations since March 2026, including cyberespionage and conflict-themed cybercrime.
Iran’s cyber capabilities, while not as advanced as those of Russia or China, are considered effective due to their exploitation of basic vulnerabilities. A UK parliamentary report highlighted Iran’s use of cyberattacks as a “deniable tool” to project power.
Beyond France, Iran-linked groups have previously targeted infrastructure in the United States and Israel, including water facilities and industrial control technology. In March this year, an Iran-linked hacking group claimed responsibility for a cyberattack on Stryker, a US-based medical device provider. The French intelligence report indicates that attacks by Shahid Kaveh and its affiliates have primarily targeted Israel and the United States, but also extended to France and other European nations.
Source
“What is Shahid Kaveh, the Iran cyberunit tied to France’s fridge hacking?”
Read the original report ↗This story was written with AI tools from the original report credited above and published after automatic checks. No person read it before it was published. If you spot an error, please tell us: corrections are published on our corrections page. Read our editorial policy · Report an error · Corrections
Read next
French supermarket hack linked to Iranian state, escalating cyber tensions
Iranian hackers have a history of sending political messages through cyberattacks.
Related
Caught up in five lines
The Brief: the day’s biggest stories, written by our desk at and .