France Accuses Iran of Cyber Sabotage as Europe Confronts New Infrastructure Threat

Analysis
We assess with high confidence that Iran-linked Shahid Kaveh is responsible for the October 11-12 refrigeration sabotage, though that confidence rests on a single primary French declaration, and Al Jazeera, CNBC and NPR repeat the same official statements rather than investigating independently. Paris has committed only to propose measures, and no other member state or EU body has signaled support. It is unlikely that the Council of the EU adopts sanctions on Shahid Kaveh or its members over the October retail attacks between November 16 and December 31, 2026. France has not yet circulated the evidentiary package that unanimous EU listings require, so the Paris arrest warrants and national measures will come first. The attribution excludes the November 2 incidents in Belgium, Ireland, Sweden and elsewhere, which could dilute a joint response. Paris may also be using attribution and warrants mainly for domestic and diplomatic signaling, with sanctions moving slowly through the EU cyber framework into 2027. Operators of exposed Danfoss and Dixell controllers remain at risk regardless, so retailers and officials must rely on patching and national measures unless sanctions land.