U.S. Agencies Issue Urgent Warning Over Global Cyber Attacks Targeting Refrigeration Systems

Federal agencies have issued a joint warning to operators of refrigeration systems worldwide, citing recent cyberattacks that have compromised the integrity and safety of temperature-controlled equipment in grocery stores and cold storage facilities. The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA), the FBI, along with the departments of Health and Human Services, Agriculture, and Transportation, are advising immediate action to secure these systems against potential threats.

The warning comes after a series of incidents reported by Nextgov/FCW last week, suggesting that Iran-linked hackers may be responsible for freezer malfunctions at military bases across the United States. These attacks began in late August and have affected approximately six commissaries serving military personnel. Additionally, reports from France indicate that Iranian hackers targeted refrigeration systems at three regional blood banks overnight Sunday into Monday.

In a broader trend, recent cyberattacks have also impacted supermarket chains in Sweden, Belgium, Luxembourg, and other regions, causing significant food spoilage due to elevated temperatures within the affected stores' refrigerators. These attacks follow similar incidents reported across hundreds of French establishments in October.

The agencies highlight that hackers can manipulate electronic temperature controls to force refrigeration units into continuous heating or defrost cycles, making it difficult for operators to monitor internal conditions accurately. Such actions not only lead to food spoilage and equipment damage but also pose serious fire hazards and potential health risks to consumers using products stored at unsafe temperatures.

These vulnerabilities arise from digital weaknesses in refrigeration control systems that connect to the internet for remote monitoring or operational adjustments. The agencies recommend removing these control systems from public internet access, securing any necessary remote connections, and isolating them from business networks. Additionally, they advise replacing default passwords, installing security updates, and retiring equipment no longer supported by manufacturers.

Chris Butera, CISA’s acting executive assistant director for cybersecurity, emphasized the importance of recognizing that every organization relying on refrigeration systems should consider itself a potential target. Brett Leatherman, the FBI's cyber branch operations director, echoed this sentiment, noting that these attacks are occurring across critical infrastructure sectors globally, putting inventory and equipment at significant risk.

Nahman Khayet, co-founder and CEO of Alt Security, pointed out that Iranian hackers have been exploiting outdated systems for years due to the high costs and logistical challenges associated with replacing large refrigeration units. This pattern suggests that many systems are not receiving necessary security updates, making them vulnerable to cyber breaches.

European authorities have also issued their own joint warning, urging immediate action to secure exposed equipment. The European Commission, cybersecurity agency ENISA, Europol, and national authorities are coordinating their efforts and sharing information about the incidents to address this growing threat effectively.