Hackers Target Industrial Refrigeration Systems as U.S. Warns of Ongoing Cyber Threat to Supplies

Warning targets cold-chain equipment

CISA, the FBI and other federal departments said hackers are compromising internet-connected refrigeration and cold-chain monitoring systems. The targets include grocery stores and cold-storage facilities, as well as infrastructure linked to food, agriculture, transportation and medicine shipping.

The agencies warned that attackers who gain control could alter temperatures, creating risks such as fires, lost inventory and reduced equipment service life. In a separate fact sheet, departments said forced heating and defrost cycles could cause broad inventory losses and equipment hazards.

Attacks reported across Europe

Recent waves of attacks hit industrial refrigeration units in the United Kingdom and Europe. The incidents affected at least a dozen countries, with hackers raising temperatures in freezers and chilling units and spoiling food and produce.

Some targeted equipment included remote-controlled units made by Danish company Danfoss. The company had stopped providing security updates for its customers’ freezers.

Blood bank and military cases

In France, hackers targeted a blood bank and raised temperatures in refrigerated units holding donated blood. The attack was stopped before it compromised blood supplies. The U.S. Department of Defense is investigating a series of hacks involving military-run freezers, Reuters reported. Signal and Silence first reported the hacks.

Agencies advise protective steps

The U.S. has not identified a specific group or government behind the attacks. Security researchers have broadly linked them to Iran, and U.S. officials reportedly also suspect Iran.

CISA, the FBI and the Departments of Agriculture, Health and Human Services, and Transportation advised affected industries to disconnect remote-control systems from the internet, strengthen passwords, install available patches and retire equipment no longer supported by vendors. CISA acting cybersecurity chief Chris Butera said organizations relying on refrigeration and monitoring systems should assume they may be targets.