Federal Agencies Warn of Ongoing Cyberattacks on Industrial Refrigeration Systems

U.S. federal authorities issued a joint warning on Thursday detailing an active cyber threat aimed at industrial refrigeration units and cold chain monitoring systems across critical infrastructure networks. In a joint advisory covered by TechCrunch (https://techcrunch.com/2026/11/05/u-s-government-warns-of-ongoing-cyber-threat-amid-mass-hacks-of-industrial-retail-and-military-freezers/), the Cybersecurity and Infrastructure Security Agency, the FBI, and the Departments of Agriculture, Health and Human Services, and Transportation cautioned that hackers are compromising internet-exposed cooling equipment in grocery stores, storage hubs, and transit facilities.

The multi-agency bulletin stressed that compromises in networked refrigeration hardware directly threaten sensitive supply lines across food, agriculture, logistics, and pharmaceutical transport. According to officials, attackers who breach these operational interfaces can alter system settings to force units into continuous heating and defrost cycles, triggering inventory loss, introducing fire hazards, and degrading the service life of industrial cooling machinery.

The alert comes after several waves of intrusions struck industrial refrigeration hardware across the United Kingdom and Europe over recent weeks. Attackers managed to raise temperatures on commercial chilling units across at least a dozen countries, spoiling defrosted food and agricultural produce. In France, hackers targeted a blood bank and elevated temperatures inside storage units containing donated blood supplies, though operators halted the breach before the inventory was damaged.

Government and military operations have also encountered intrusions. The U.S. Department of Defense is reviewing a series of attacks on military-operated freezers, according to reporting from Reuters based on initial disclosures from Signal and Silence. While the U.S. government has stopped short of formally attributing the campaign to a specific nation or group, security analysts have broadly linked the intrusions to Iran, and U.S. officials reportedly view Iranian operators as the likely culprit.

Unsupported and exposed operational hardware has served as an entry point in several incidents. A portion of the affected networks relied on remote-controlled cooling systems manufactured by Danish engineering firm Danfoss, which had ceased releasing security patches for the older freezer hardware.

“Every organization that depends on refrigeration and monitoring systems should assume it could be a target,” said Chris Butera, CISA's acting cybersecurity chief.

Federal agencies are instructing operators in food, medical, and transit sectors to immediately pull remote control consoles off the open internet, strengthen access credentials, install available firmware updates, and decommission legacy hardware that vendors no longer support.