Access with physical effects
Changing a software temperature setting rendered food unusable across hundreds of supermarkets. That is the hard edge of the French attack. Physical disruption required no explosive. According to the BBC, Danfoss software let retailers manage refrigeration remotely. Attackers took control on October 11. More than 100 Coopérative U stores and 180 Intermarché and Netto stores were affected. Spoiled food is a loss reported by retailers, rather than an estimate of an attacker’s intentions.[1]
The capability goes beyond sending a message to a remote system: it changes how refrigeration operates. A store’s protected interest is food held at a safe temperature, as well as a functioning computer. Use of the same management software across different chains exposes a shared dependency. My defence assessment is that management access spanning multiple stores can produce disruption beyond a single location. Different local configurations and separate compromises remain an alternative explanation to one common technical failure; the initial access route has not been disclosed.[1]
Communicating a cost
Jean-Noël Barrot attributed responsibility to Iran’s Revolutionary Guards on November 9. The Iranian ambassador was summoned. Paris prosecutor Laure Beccuau announced an investigation into the leader and two deputies of Shahid Kaveh, which she associates with the Guards’ cyber centre. Iran had not responded when the BBC published. These are French attribution and judicial actions. The government has not disclosed the technical basis for its attribution. A military assessment still has to distinguish the disruption caused from the separate question of who ordered it.[1]
Barrot promises European sanctions and a proportionate response. That communicates an intended cost. It does not establish successful deterrence. No announced development demonstrates changed behaviour by the alleged attacker. The strongest alternative reading is that summoning the ambassador and opening an investigation are diplomatic and judicial accountability measures before they are a threat capable of stopping an attack. Those measures have value. A sanctions promise still does not show that access to refrigeration controls has been closed or that the disruption cannot recur.[1]
Defence that sustains operations
Supermarkets in other European countries, including Belgium and Luxembourg, were hit in early November. A link to the French attack remains unknown. There is a shared defensive burden without assuming a single command centre: sustaining the systems that keep food cold. Civilians bear losses in spoiled stock and disrupted everyday services. Reducing that cost to an abstract display of cyber power understates its effect. For a supermarket, continuity means refrigeration actually continuing to work.[1]
My measure does not end with the severity of threatened punishment. Preventing control from being seized again and sustaining refrigeration are concrete defensive tasks. How long attackers maintained control and how quickly stores recovered are measures of the capability’s weight. Today’s announcements do not supply those durations. Defence that preserves refrigeration and restores it after disruption limits the effect of physical sabotage. France’s protected interest is as tangible as food remaining safe in the refrigerator.[1]