Federal cybersecurity officials warned that attackers are exploiting internet-connected refrigeration equipment to manipulate temperatures, destroy food and threaten medical supplies following widespread attacks across Europe and suspected incidents at U.S. military bases.
By yourNEWS Media Newsroom
WASHINGTON — Five federal agencies issued an urgent cybersecurity warning Thursday, Nov. 5, after hackers targeted industrial refrigeration systems used by grocery stores, hospitals, food distributors and transportation companies, raising concerns that attackers could remotely destroy temperature-sensitive products and damage critical equipment.
The Cybersecurity and Infrastructure Security Agency, FBI and the departments of Health and Human Services, Agriculture and Transportation jointly warned that malicious actors are exploiting vulnerabilities in electronic temperature controllers and commercial refrigeration systems connected to the internet.
The attacks can allow unauthorized users to change temperatures, activate heating or defrost cycles and interfere with monitoring systems designed to protect refrigerated inventory.
According to Reuters’ coverage of the federal warning, authorities described the activity as an ongoing international threat affecting businesses and essential infrastructure.
Officials warned that successful attacks could result in widespread food spoilage, damage to refrigeration equipment and even fire hazards.
“Every organization that depends on refrigeration and monitoring systems should assume it could be a target,” said Chris Butera, CISA’s acting executive assistant director for cybersecurity.
The warning follows a series of cyberattacks affecting commercial refrigeration equipment in Europe, where hackers remotely changed the settings of refrigerators and freezers at hundreds of supermarkets.
Similar incidents involving refrigeration equipment at U.S. military installations are also under investigation.
The advisory identifies internet-exposed or unpatched temperature controllers as a primary vulnerability. Attackers may exploit weak passwords, authentication flaws or other software weaknesses to gain access to refrigeration management systems.
Once inside, hackers can remotely alter operating temperatures or force equipment into continuous heating and defrost cycles. Such manipulation can spoil refrigerated food and medicine, reduce equipment lifespan and create physical safety hazards.
Attackers may also interfere with temperature-monitoring displays, preventing employees from recognizing unsafe conditions before products are damaged.
The warning follows significant disruptions in Europe. In October, cyberattacks reportedly compromised refrigeration systems at an estimated 250 to 350 French supermarkets, resulting in extensive food losses.
Another wave in early November affected more than 115 stores across at least six European countries. Some affected systems reportedly reached temperatures as high as 122 degrees Fahrenheit.
According to The Associated Press, the incidents exposed security weaknesses in commercial refrigeration equipment, including outdated software and insufficiently protected remote-access systems.
The attacks have also extended beyond supermarkets.
On Nov. 3, the French Blood Establishment confirmed that a cybersecurity incident involving a refrigeration equipment provider had affected temperature settings at three facilities storing blood products. Personnel intervened before the incident compromised the blood supply.
U.S. military installations have experienced suspicious refrigeration failures as well.
According to Nextgov/FCW reporting, investigators are examining malfunctions involving refrigeration units at approximately six military commissaries beginning in late August.
Officials have considered the possibility that the incidents involved cyberattacks. However, a connection between the American military incidents and the European attacks has not been established.
The identity of the attackers remains unresolved.
Some U.S. officials and security researchers have expressed suspicions involving Iran-linked hackers, but federal agencies have not publicly attributed the broader campaign to a particular government or criminal organization.
Brett Leatherman, operations director of the FBI’s Cyber Branch, said the attacks threaten infrastructure responsible for preserving essential products.
“Industrial refrigeration and cold-chain monitoring systems protect food, medicine, and other temperature-sensitive products, making them attractive targets for malicious cyber actors,” Leatherman said, according to Help Net Security’s coverage of the warning.
The government is urging businesses and infrastructure operators to immediately review their cybersecurity protections.
Federal recommendations include removing refrigeration controllers from direct public internet access, installing available firmware updates, replacing default passwords and separating industrial control equipment from ordinary corporate networks.
Organizations are also advised to strengthen remote-access authentication, maintain offline backups and configure independent alerts when refrigeration temperatures exceed safe operating limits.
Equipment that no longer receives manufacturer security updates should be evaluated for replacement.
The agencies emphasized that refrigerated storage supports several critical industries, including food production, pharmaceutical distribution, health care and transportation. Disruptions can therefore have consequences extending beyond individual businesses.
The warning underscores the increasing vulnerability of physical infrastructure connected to digital networks. While remote monitoring allows companies to manage temperatures efficiently, inadequate cybersecurity protections can give attackers control over equipment responsible for preserving food, blood products and medications.
Federal authorities said the threat remains active and urged operators to report suspicious activity while implementing protective measures.
Original article
Comments