Evidence so far on 2026-11-14 UTC · updated 2026-11-14 11:25 UTC · analysis as of 2026-11-14 05:39 UTCSign in for the live Situation ↗
Narrative
As-of analysis
Carried forward
Situation at a glance
Stories including “Cyberattack targets refrigeration systems at dozens of European supermarkets” and “Cyberattacks hit supermarket freezer systems in at least 11 European countries” described a cross-border wave of reported supermarket refrigeration incidents; the 2 November Events separately describe disruption at Intermarché and SuperValu. On 3 November, hackers raised temperatures in Edeka store freezers in Reisbach, while Richard Horne urged businesses to strengthen cyber defences. On 4 November, SuperValu restored refrigeration at 13 Irish stores, and on 5 November Bernese police investigated the attack on Lüthi's Fleischwaren in Köniz. The FBI warning Event is dated 5 November, while its supporting Story was reported on 6 November. French blood-bank freezer-control coverage was reported on 5 November; the linked Event is dated 8 November. France’s prosecutors sought international warrants on 10 November; on 11 November Abbas Araghchi criticized France’s attribution, while Ferit Hoxha urged European unity. On 12 November the French government threatened tougher sanctions on Iran, and Scott Bessent accused Iran of using Chinese AI in cyberattacks; the related headline “Iran linked to hack of refrigeration systems at 700 French supermarkets” was reported on 13 November.
The supermarket and cold-storage reports span different targets and responses, while the French blood-bank Event extends the reported concern to medical storage; neither the shared subject matter nor the headline “European authorities probe coordinated cyberattacks on supermarkets and blood banks” establishes that these incidents were coordinated. The FBI’s warning was directed to businesses operating supermarkets and healthcare facilities, and Italy’s Antonio Tajani said Italy would respond diplomatically; these are evidenced official responses, not proof of a single campaign. Attribution remains disputed: a Story reports pro-Russian groups claiming attacks and another reports Russia’s denial; France attributed the supermarket attacks to an Iranian unit, and Belgian reporting later showed ministers at odds over Iran’s alleged role. Araghchi’s criticism and Bessent’s accusation are claims and responses, not independently established responsibility. Italy also said cyberattacks did not disrupt all food refrigeration systems. The French warrant-seeking Event establishes a legal step, and the government’s sanctions Event a threat, not guilt or implemented sanctions; Sybiha’s proposal for Italian assistance to Ukraine is a separate strand.
264 canonical Entities are linked to this edition.
Metric coverage. 21 coded Events · 21 CAMEO+ · 0 conflict. The four dimensions describe the CAMEO+ subset; conflict Events do not carry these scores.
Magnitude2.9
min 1max 6
21 measured
Systemic importance0.11
min 0.06max 0.27
21 measured
Propagation potential0.29
min 0.16max 0.38
21 measured
Market sensitivity0.2
min 0.05max 0.6
21 measured
Dot = mean · shaded span = observed range · position uses each metric’s defined scale.
All 7 scores, distributions & definitions
How the coder scored the full retained Event set
21 coded events — 21 CAMEO+ (10 political)
Significance · 210.27
min 0.18max 0.41
Magnitude · 212.9
min 1max 6
Systemic · 210.11
min 0.06max 0.27
Propagation · 210.29
min 0.16max 0.38
Market · 210.2
min 0.05max 0.6
Goldstein · 10-0.3
min -5.8max 3
Confidence · 210.69
min 0.42max 0.92
Quad class over those 10 events · Verbal Cooperation 6 · Verbal Conflict 4. No conflict-family event here, so nothing carries a fatality count — a missing column, not a toll of zero. 11 sit outside POLITICAL, where Goldstein and quad class are undefined.
score (-10 to 10) · Event-level distribution, not a Situation risk score.
across the 10 of 21 events Goldstein is defined on — CAMEO+ POLITICAL and the conflict family; the other nine CAMEO+ domains have no Goldstein semantics
This retained edition, independent of graph and page limits. Different dimensions, not a blended risk score; reported tolls may overlap.
Day by day13 reporting days · click a day to open or close it
2026-11-14from the recordslatest
Belgian ministers split over Iran's alleged role in store cyberattacks
2 Stories and 0 coded Events (-2 / 0 against the day before). Widest coverage: Belgian ministers split over Iran's alleged role in store cyberattacks (1 articles).
The Europe-wide supermarket coverage sits alongside the reported SuperValu, Edeka, Köniz and French blood-bank incidents. These reports concern distinct targets; they do not establish a shared operator or coordination.
The Europe-wide supermarket coverage sits alongside the reported SuperValu, Edeka, Köniz and French blood-bank incidents. These reports concern distinct targets; they do not establish a shared operator or coordination.
developmentAnalystWarnings, preparedness and diplomatic responses
The FBI warned businesses about cooling-system attacks, and Italian and European coverage described warnings, meetings and readiness assessments. Tajani said Italy would respond diplomatically; Hoxha called for European unity.
The FBI warned businesses about cooling-system attacks, and Italian and European coverage described warnings, meetings and readiness assessments. Tajani said Italy would respond diplomatically; Hoxha called for European unity.
developmentAnalystCompeting attribution claims and French-Iranian dispute
Coverage includes pro-Russian groups’ claims, Russia’s denial, France’s attribution to an Iranian unit, Araghchi’s criticism and Bessent’s accusation. These are attributed claims and responses, not established responsibility.
Coverage includes pro-Russian groups’ claims, Russia’s denial, France’s attribution to an Iranian unit, Araghchi’s criticism and Bessent’s accusation. These are attributed claims and responses, not established responsibility.
The Federal Bureau of Investigation was the named actor in the warning to businesses operating supermarkets and healthcare facilities about cooling-system attacks.
The Federal Bureau of Investigation was the named actor in the warning to businesses operating supermarkets and healthcare facilities about cooling-system attacks.
Evidenced relationships involving significant participants beyond the central cast.
The SuperValu refrigeration-restoration Event is linked to the Story “Cyberattack on SuperValu refrigeration systems in · reporting linkAnalystSuperValu restores refrigeration at 13 Irish stores after cyberattack → Cyberattack on SuperValu refrigeration systems in Ireland is resolved
The Event names this Story as its supporting Story.
The Event names this Story as its supporting Story.
The Bernese police investigation Event is linked to the Story about the Köniz butcher-shop attack. · reporting linkAnalystBernese police investigate cyberattack on Lüthi's Fleischwaren → Cyberattack targets refrigeration systems at butcher shop in Köniz, Switzerland
The Event names this Story as its supporting Story.
The Event names this Story as its supporting Story.
The FBI warning Event is linked to the Story “U.S. officials warn businesses of cyberattacks on industrial refrigerators · reporting linkAnalystU.S. agencies warn businesses about attacks on cooling systems → U.S. officials warn businesses of cyberattacks on industrial refrigerators
The Event names this Story as its supporting Story.
The Event names this Story as its supporting Story.
The French blood-bank freezer-control Event is linked to the Story about the attack. · reporting linkAnalystHackers target French blood banks through freezer controls → Hackers target French blood banks by raising storage freezers to 230 degrees
The Event names this Story as its supporting Story.
The Event names this Story as its supporting Story.
The Federal Bureau of Investigation is the named actor issuing the public warning. · recorded participationAnalystFederal Bureau of Investigation → U.S. agencies warn businesses about attacks on cooling systems
Compared with currently maintained Situation membership; this list is not part of the retained edition above.
How a Situation is put together105 Stories · 21 Events · 105 membership connections · 661 graph edges
A retained time step
This edition freezes the complete served membership and analysis available through its UTC cutoff. Later repairs or identity changes do not rewrite what this edition showed.
Stories, Events, and cast
Stories are reporting clusters. Events are coded occurrences within that reporting. The cast contains 264 canonical people and organizations linked to the retained evidence.
Typed connections
Story-to-Event edges identify supporting reporting. Entity-to-Event edges identify recorded actor or target participation. Mentions and analytical roles stay visibly distinct from recorded participation.
Core, precursor, and continuation labels organize the reading. They do not by themselves establish causation. Collapsed graph groups and paginated evidence change presentation only; counts use the complete retained edition.
