Science & Tech · Cybersecurity · 1 hr ago
US warns businesses to secure industrial refrigeration systems
Five US agencies warned of an ongoing cyber threat to industrial refrigerators and freezers used by businesses.
The warning covers systems in grocery stores, healthcare, agriculture, transport and other sectors.
Hackers are exploiting weaknesses in outdated or internet-connected temperature controls.
If attackers change temperatures, food or medical supplies could spoil, and systems could pose fire risks.
The warning follows attacks on commercial refrigeration in Europe and malfunctions at six US military bases in August, which the Army is investigating.
Businesses are urged to update software, change passwords and isolate the systems from the internet and company networks; the agencies did not say whether US refrigeration systems had been targeted.
Five U.S. federal agencies warned businesses to secure industrial refrigeration and cold-chain monitoring systems against cyberattacks.
The agencies said attackers are targeting unpatched or internet-accessible controllers that can remotely change temperatures and defrost settings.
Successful attacks could spoil food or other stored products, damage equipment, create fire hazards and make unsafe temperatures harder to detect.
The warning follows attacks and disruptions affecting refrigeration systems in Europe, as well as unexplained incidents at U.S. military bases.
Officials urged operators to remove systems from the public internet where possible, secure remote access, change passwords and apply software updates.
- Who
- The FBI, CISA and the departments of Health and Human Services, Agriculture and Transportation issued the warning. It is aimed at businesses and critical infrastructure operators that depend on industrial refrigeration.
- What
- The agencies warned of ongoing cyber threat activity targeting refrigeration controllers and urged operators to secure their systems.
- When
- The joint warning was issued on Thursday, November 5, 2026.
- Where
- The warning concerns systems used in the United States and describes attackers targeting refrigeration systems globally.
- Why
- Vulnerable controllers could be used to change temperatures or defrost settings, potentially spoiling inventory, damaging equipment or creating fire hazards.
This story does not have two clearly opposing sides.
Refrigeration units at several U.S. military bases experienced unexpected malfunctions, which are under investigation.
Hackers compromised refrigeration controllers at an estimated 250 to 350 French supermarkets, according to BleepingComputer.
The French Blood Establishment confirmed a cybersecurity incident affecting temperature and defrost settings at three facilities storing blood products.
Five U.S. federal agencies issued a joint warning urging operators to secure industrial refrigeration systems.
- Issuing agencies
- FBI, CISA, HHS, USDA and DOT
- Advisory date
- November 5, 2026
- French supermarket incidents
- An estimated 250 to 350 supermarkets affected in October, according to BleepingComputer
- French blood storage facilities
- Three facilities affected, according to the French Blood Establishment
- Recommended measures
- Remove controllers from the public internet, secure remote access, change passwords and apply security updates
5 sources
FBI, CISA warn of cyberattacks targeting refrigeration systems
Feds warn of potential cyberattacks on industrial refrigerators
Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up
US warns of 'ongoing cyber threat' to industrial refrigeration systems
Harden cooling systems now, feds warn critical infrastructure operators amid attacks
What people are saying
Every organization that depends on refrigeration and monitoring systems should assume it could be a target.
seeing these systems targeted across critical infrastructure sectors globally.
There's only so many players that do industrial-level refrigeration, and they're likely also just as vulnerable.