Federal agencies urge supermarkets, cold-storage operators and food distributors to strengthen cybersecurity protections following attacks in Europe and suspected incidents at U.S. military commissaries.
Federal cybersecurity officials are urging U.S. supermarkets, food distributors and cold-storage operators to strengthen protections for their refrigeration systems following cyberattacks in Europe and suspected incidents at U.S. military installations.
The Cybersecurity and Infrastructure Security Agency (CISA), FBI and the departments of Agriculture, Health and Human Services, and Transportation issued a joint advisory Nov. 5 warning that hackers are targeting internet-connected refrigeration controllers and cold-chain monitoring equipment.
Attackers can exploit outdated software, weak passwords and unsecured remote connections to manipulate temperatures, initiate defrost cycles and interfere with monitoring systems. Successful attacks can cause food spoilage, equipment damage, operational disruptions and potential food safety risks.
European Attacks Prompt U.S. Warning
The advisory follows several waves of attacks against commercial refrigeration equipment in Europe.
In October, hackers reportedly compromised refrigeration controllers at hundreds of French supermarkets, activating defrost functions and raising temperatures in refrigerated and frozen-food cases.
A second wave in early November affected more than 100 European stores. In some incidents, temperatures reportedly reached 50°C (122°F). French blood-storage facilities have also been targeted. U.S. authorities are investigating suspected attacks involving refrigeration equipment at military commissaries.
According to Reuters, freezer malfunctions at at least six U.S. military bases in August resulted in spoiled food. In one incident, refrigeration controls apparently were switched to defrost mode overnight. Pentagon investigators are coordinating with French authorities, although officials have not established a connection between the incidents or identified those responsible.
Connected Equipment Creates Vulnerabilities
Modern refrigeration systems use network-connected controllers to manage temperatures, schedule defrost cycles, monitor performance and improve energy efficiency. These capabilities allow operators and service providers to manage equipment remotely, but poorly secured connections can provide access to unauthorized users.
Hackers may also interfere with temperature monitoring, preventing employees from recognizing unsafe conditions before products deteriorate. The risks extend beyond supermarkets to distribution centers, refrigerated transportation and food processing facilities.
Federal Agencies Recommend Immediate Action
The advisory urges operators to implement several security measures:
- Restrict internet access: Disconnect refrigeration controllers from public networks and secure necessary remote connections.
- Strengthen authentication: Replace default passwords and implement multifactor authentication where feasible.
- Separate critical systems: Isolate refrigeration controls from corporate business networks.
- Update equipment: Install security patches and replace unsupported controllers.
- Monitor operations: Review system activity, establish temperature limits and ensure alerts reach responsible personnel.
- Prepare for recovery: Maintain tested configuration backups and restrict equipment access.
For supermarkets, refrigeration failures can result in substantial inventory losses, department closures and interruptions to operations. Distribution center failures can affect multiple stores simultaneously.
The warning underscores the food industry’s growing dependence on connected equipment and the potential consequences when cybersecurity protections fail to keep pace.
The full CISA advisory provides additional technical guidance for operators and equipment service providers.