US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers

Industrial refrigeration units are large cooling systems used in supermarkets, cold-storage facilities, military sites, and other operations. They keep products at controlled temperatures. Cold-chain monitoring systems track those temperatures and may allow staff to manage equipment remotely. Together, they protect goods as they move through storage and distribution.

The article describes internet-connected systems in grocery stores and cold-storage facilities. A hacker who compromises the equipment may change its temperature or force heating and defrost cycles. That can spoil food, damage produce, create fire hazards, and shorten equipment service life. Monitoring systems can therefore control more than a digital display; they can affect physical machinery.

These systems support food, agriculture, transportation, and medicine-shipping industries. CISA, the FBI, and other agencies say every organization relying on refrigeration and monitoring systems should assume it could be targeted. They recommend removing remote controls from the internet, strengthening passwords, applying patches, and retiring unsupported equipment.

The attacks were international rather than confined to one facility or country. The article describes several waves targeting industrial refrigeration units across the United Kingdom and Europe. Two separate waves affected systems in at least a dozen countries. The United States also warned that critical infrastructure could be targeted.

Reported victims included supermarket freezers, cold-storage facilities, U.S. military freezers, and a blood bank in France. Some systems were remote-controlled refrigeration units made by Danish company Danfoss. The attacks affected sectors tied to food, agriculture, transportation, and medicine-shipping. The French blood bank’s refrigerated units were made warmer, but the attack was stopped before blood supplies were compromised.

The U.S. Department of Defense is investigating hacks involving military freezers. The wider warning came from CISA, the FBI, and several federal departments. The agencies did not give a complete victim count. Their warning indicates that refrigeration systems across multiple industries remain exposed and could face further attacks.

A connected refrigeration system may include remote controls that adjust temperature and manage cooling or defrosting. If attackers compromise that system, they can send commands without standing beside the freezer. The agencies warned that hackers could change temperatures or force units into continuous heating and defrost cycles. Those commands can turn a digital intrusion into a physical problem.

The article gives a clear example. Attackers raised temperatures in freezers and chilling units across at least a dozen countries. Defrosted food spoiled, and produce was destroyed. A French blood bank also saw temperatures rise in units holding donated blood. In that case, the attack was stopped before the blood stores were compromised.

Internet connectivity enables remote access, but it also expands the number of systems attackers can try to reach. The article does not identify the precise vulnerability used in each incident. Officials therefore recommend removing remote control systems from the internet, changing passwords, applying patches, and retiring unsupported equipment.

Temperature control protects goods that must remain within safe storage conditions. When refrigeration fails or is deliberately altered, food can defrost and spoil. Medicine and donated blood may also be put at risk. The article stresses that the damage can reach beyond inventory, affecting equipment and the services that depend on it.

In two attack waves, hackers raised temperatures in freezers and chilling units across at least a dozen countries. Defrosted food spoiled, and produce was destroyed. Attackers also increased temperatures in a French blood bank’s refrigerated units. The incident was stopped before it compromised the blood stores, limiting the immediate impact in that case.

The agencies warn that attackers could force continuous heating and defrost cycles. That could cause widespread inventory loss and equipment hazards, including possible fires. They also warn of changes to a system’s service life. Organizations handling food, medicine, or blood therefore need secure controls, timely patches, and equipment that vendors still support.

The article distinguishes between suspicion and confirmed attribution. The U.S. government has not tied the refrigeration attacks to a particular hacking group or government. CISA, the FBI, and other agencies warned about the threat without naming an attacker. That leaves the official identity of the perpetrators unresolved.

Security researchers have broadly attributed the attacks to Iran. U.S. officials also reportedly suspect Iran is the likely culprit. The article does not identify a specific Iranian group, provide evidence for that assessment, or describe a public government finding that confirms it. Those details remain unconfirmed in the account provided.

The uncertainty does not reduce the operational risk. The attacks affected refrigeration systems across multiple countries and industries, including food and medicine-related facilities. Organizations are being urged to protect systems regardless of who is responsible. The federal warning focuses on reducing exposure, strengthening access controls, applying patches, and replacing unsupported equipment.

The agencies’ main alternative is to reduce or remove unnecessary remote exposure. Organizations should take remote control systems off the internet, change and strengthen passwords, and apply patches wherever possible. These steps make it harder for attackers to reach refrigeration controls or use existing weaknesses.

The warning also addresses equipment that cannot receive vendor support. If a manufacturer no longer provides security updates, the organization should retire that equipment instead of relying on an outdated system. The article highlights Danfoss units whose security updates had stopped. Those systems were among the remote-controlled refrigeration equipment affected in the attacks.

These actions matter because refrigeration failures can cause spoilage, physical hazards, and disruption in food and medicine-related industries. The agencies also urge affected organizations to treat themselves as potential targets. Removing internet access, improving passwords, patching supported devices, and replacing unsupported units provide a practical defensive path while the threat continues.

The cold chain is the connected system of refrigeration, storage, monitoring, and transportation that keeps temperature-sensitive goods within needed conditions. It matters because food, agricultural products, medicines, and donated blood may depend on reliable cold storage. The article identifies these systems as part of critical infrastructure serving several major industries.

The attacks show why the chain matters. Hackers raised temperatures in freezers and chilling units in at least a dozen countries. Food defrosted and produce was destroyed. At a French blood bank, temperatures rose in refrigerated units holding donated blood, although the attack was stopped before supplies were compromised. A temperature change can therefore affect both inventory and public services.

Because many systems are internet-connected, a cyberattack can create physical consequences far from a computer screen. The agencies warn of fire hazards, equipment damage, and reduced service life. They urge organizations to assume they could be targeted and secure, patch, or replace vulnerable refrigeration equipment.