Skip to main content
TREADSTONE 71 INTELLIGENCE REPORT // IRAN // IRGC CYBER ELECTRONIC COMMAND // NOVEMBER 12, 2026

Treadstone 71 Intelligence Report · Iran · Cognitive and Hybrid Warfare

Cold Front: Shahid Kaveh and the War on Refrigeration

An Iranian state unit turned freezers into a weapon. France named Shahid Kaveh, an offensive unit of the Guard Corps’ cyber command, for the October 2026 sabotage of refrigeration controllers at about 700 French stores. The same method struck US military commissaries seven weeks earlier and stores across Europe three weeks later.

By , Chief Intelligence Officer Published 53 pages · Version 1.4
Download the report (PDF) Commission an assessment
3waves against one device class in ten weeks
700French retail sites hit on one night
19standing judgments on the Sherman Kent scale
12signposts to watch through March 31, 2027

What the report finds

JudgmentBand
Shahid Kaveh ran the October operation in FranceHighly likely (85 to <95)
The war that began February 28, 2026 set the timing and tempo of the campaignHighly likely (85 to <95)
An Iranian state operator ran the August attack on US commissariesLikely (55 to <85)
Another cold-chain event in the United States or Europe by January 31, 2027Highly likely (85 to <95)
A medical cold-chain loss by March 31, 2027Roughly even chance (45 to <55)

Inside the report

  • The unit: chain of command, leadership, and a chronology from 2020 to 2026.
  • The campaign: three waves, the method at the level of effect, and the US commissary night.
  • The war as trigger: each escalation paired with the controller effect that followed.
  • What Telegram adds: the unit’s outlet, state relays, and leak channels, read in Persian, Russian, and English.
  • Analysis: patterns, trends, tendencies, aggregation, semiotics, forensic linguistics, and competing hypotheses.
  • STEMPLES Plus and Cultural Nexus readings of the unit and the campaign.
  • Estimates, five scenarios, cones of plausibility, signposts, and a ledger of what stays unknown.

What to do now

  • Take refrigeration controllers off the public internet and reach them through a private link.
  • Replace default and date-based passwords with a unique secret per site.
  • Fit a temperature alarm that does not pass through the controller.
  • Staff a temperature watch on Sunday nights and holidays through January 3.

Every source in the report carries two grades under the ASA Evidence Standard, reliability and credibility, shown apart. Verified facts and adversary claims keep separate rows.

Download the report (PDF) More Iran briefs

Copyright 2026 Treadstone 71, LLC