Last updated
Metro: Cybersecurity Incident
Metro cash-and-carry stores in France were affected by the October refrigeration-controller attacks attributed to Iran-linked CyberAv3ngers.
Source: The Register
- Who
- Metro · France
- What happened
- Metro cash-and-carry stores in France were affected by the October refrigeration-controller attacks attributed to Iran-linked CyberAv3ngers.
- When
- 2026-11-09
- Source
- The Register
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Metro in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: MitchelLake's Talent Market Index sits at 97.8 (Neutral), down 3.2 on the prior month; EMEA hiring signal is running rising (+5.9pts).
Metro: 2 signals in the last 90 days; 0.1% of MitchelLake's Asia signal flow; 3 tracked across 111 days.
MitchelLake in this thematic
Also at Metro →
More signals across EMEA
Cybersecurity Incident · EMEA
Technical University of Munich (TUM) →Attackers stole central login passwords for everyone registered with TUM's myTUM portal, then used an admin's credentials to attack TUMonline, forcing the campus management system offline. Disclosed November 6; access restored November 9 with forced password resets.
Cybersecurity Incident · EMEA
Carrefour →Carrefour's French stores were among more than 700 grocery locations hit in October by destructive cyberattacks on refrigeration controllers, causing fires and food losses. France's C4 coordination centre attributes the campaign to the IRGC-linked Shahid Kaveh unit (CyberAv3ngers).
Cybersecurity Incident · EMEA
Casino →Casino group stores were affected by the October cyberattacks on refrigeration controllers across French grocery chains, attributed to Iran-linked actors.
Cybersecurity Incident · EMEA
Wyndham →Hotel group Wyndham exposed customer data through a hardcoded credential left in its customer-facing app, allowing anyone to access customer records. The company declined to say whether it can check for past unauthorized access.
Cybersecurity Incident · EMEA
Royal Cornwall Hospitals NHS Trust →Royal Cornwall Hospitals NHS Trust suffered a data exposure affecting 8,003 current and former staff and non-trust workers. Sickness absence records were retained in an FOI disclosure spreadsheet and revealed through pivot tables. A review found the subsequent helpline was poorly prepared, placing emotional strain on staff and running for 11 weeks rather than the planned two.
Cybersecurity Incident · EMEA
French National Blood Establishment (EFS) →Cyberattack targeting the French National Blood Establishment (EFS) and linked to three blood storage sites; detected before any damage was done.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Executive Search: EMEA →
Our EMEA practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗