The US government has issued a security alert regarding persistent cyber threats targeting industrial refrigeration systems. Agencies including CISA and the FBI report that attackers are compromising internet-connected temperature control and monitoring equipment across critical sectors, such as food, agriculture, and medical logistics.
Recent attacks have affected over ten countries in Europe, including Sweden, Belgium, Luxembourg, and Ireland. Hackers manipulated remote control systems to raise temperatures, causing significant spoilage of frozen food and agricultural products. Some compromised devices were manufactured by the Danish firm Danfoss, with researchers noting that older models lacking security updates are particularly vulnerable.
The scope of these incidents extends to sensitive infrastructure, including a blood bank in France and approximately six military supply facilities in the US. Since August, US military bases have reported malfunctions in commissary freezers, which are currently under investigation to determine if they are the result of coordinated cyberattacks.
Attackers can remotely alter temperature settings, trigger heating or defrost modes, and manipulate real-time data to evade detection. These actions risk physical damage, including fire hazards, equipment failure, and the distribution of unsafe products. While no specific group has been officially blamed, some security researchers and officials have identified Iran as a potential suspect.
To mitigate these risks, authorities advise organizations to disconnect remote control systems from the public internet and implement robust security measures. Recommended actions include updating passwords, applying software patches, segmenting industrial networks, and decommissioning legacy hardware that no longer receives manufacturer support.
