Bessent Blames Chinese AI for French Fridge Hacks, Contradicting French Attribution to Iran

Key points

• US Treasury Secretary Scott Bessent stated on November 12, 2026, that a Chinese artificial intelligence model was used in the recent hacks that disabled refrigerators in French supermarkets.
• The initial attack on October 11-12, 2026, affected approximately 700 French supermarkets and the national blood bank, forcing retailers to discard damaged food and causing fires.
• French authorities attributed the October attack to Shahid Kaveh, a cyber unit affiliated with Iran’s Islamic Revolutionary Guard Corps, describing it as the first large-scale sabotage cyberattack on French soil.
• A second wave of attacks on November 2, 2026, affected supermarkets and food businesses in at least nine European countries, including Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden.
• French cybersecurity officials noted that attackers exploited basic security failures, such as weak passwords, outdated software, and direct internet connections without extra protection.
• The attacks targeted legacy software from Danish manufacturer Danfoss, which manages refrigeration systems remotely, and highlighted risks to other internet-connected devices like smart fridges and industrial machinery.

Background

In October 2026, a coordinated cyberattack disrupted refrigeration systems in over 400 French supermarkets, causing temperatures to spike to 50°C (122°F) and forcing the disposal of perishable goods. The incident, which affected major chains including Carrefour and Intermarché, resulted in estimated losses exceeding €10 million and sparked fires in some locations. French authorities investigated the breach, which targeted legacy software from Danish manufacturer Danfoss. This followed a series of large-scale cyberattacks on French companies and government departments, making France a high-value target for hackers due to its economic and political significance.

How outlets are covering it

Bloomberg reports that US Treasury Secretary Scott Bessent attributed the French fridge hacks to a Chinese AI model, a claim not mentioned in other sources. Al Jazeera and France 24 report that French authorities blamed the October attack on Shahid Kaveh, an Iranian cyber unit, while the November wave’s perpetrator remains unclear. France 24 notes that France is a high-value target due to its economic size and political role, while Al Jazeera emphasizes the broader risks to internet-connected devices and critical infrastructure. The Guardian highlights the lack of firmware upgrades and security features in the 'internet of things,' suggesting that AI has reduced the time required to find exploits but does not introduce novel vulnerabilities.

Why it matters

The conflicting attributions highlight the complexity of cyberattack origins and the potential for AI to accelerate exploitation of existing vulnerabilities. The attacks underscore the risks of internet-connected devices in critical infrastructure, from supermarkets to healthcare and energy, and the need for improved cybersecurity measures to prevent future disruptions.

What to watch

European officials are likely to increase cybersecurity protections for critical infrastructure, while companies and consumers may adopt stricter security practices, such as updating software and disabling unused features. The EU may also enforce its NIS2 Directive more strictly to hold operators and manufacturers accountable for cybersecurity lapses.