Hackers are targeting refrigerators worldwide, US agencies warn

Electronic refrigeration control systems are the digital components that monitor and manage cooling equipment. They receive temperature readings and direct compressors, heaters, fans, or defrost functions to keep refrigerators and freezers within a chosen range. The article focuses on controls that can be monitored or operated remotely.

Their importance becomes clear when attackers interfere with them. Hackers could force a unit into continuous heating or defrost cycles, raising temperatures and damaging stored goods. They could also block operators from seeing current readings, removing an important warning signal.

These systems are used far beyond grocery stores. Blood banks, hospitals, pharmaceutical suppliers, chemical companies, transportation providers, and cold-storage facilities depend on them. Because many systems connect to networks or the internet, operators must secure remote access, separate controls from business networks, install updates, and replace unsupported equipment.

The attacks are international, not confined to one company or country. In the United States, freezer failures affected roughly six military commissaries across the country. Federal agencies also warned that grocery stores and cold-storage facilities worldwide are being targeted.

Europe has seen several waves. Hackers targeted refrigeration systems at three regional blood banks in France. A newer wave raised supermarket refrigerator temperatures in Sweden, Belgium, Luxembourg, and elsewhere. Hundreds of French establishments experienced attacks in October. The affected systems support food, blood, and other temperature-sensitive supplies.

The broader risk reaches hospitals, pharmaceutical suppliers, chemical companies, and transportation providers. U.S. agencies described targeting across critical infrastructure sectors globally. European authorities, including the European Commission, ENISA, Europol, and national authorities, are sharing information and coordinating their response.

Attackers can interfere with the electronic commands that control refrigeration equipment. The agencies warned that hackers could force refrigerators or freezers into continuous heating or defrost cycles. Those settings can push temperatures away from safe operating conditions and may damage the equipment.

Hackers can also prevent operators from seeing current temperatures. This matters because staff may believe a unit is working normally when its actual conditions have changed. The article describes internet-connected devices used to monitor or control temperatures as possible entry points for sabotage.

The result is both physical disruption and lost visibility. Operators may not know that food, blood, medicines, or other sensitive materials are warming. The agencies urged organizations to remove controls from the public internet, secure necessary remote access, separate controls from business networks, and install security updates.

When refrigeration controls are disrupted, refrigerators and freezers may heat continuously or enter repeated defrost cycles. Stored products can warm beyond safe conditions, and equipment can suffer damage. If operators cannot see current temperatures, they may miss the failure until inventory is already compromised.

The article reports spoiled food after attacks on supermarkets in Sweden, Belgium, Luxembourg, and elsewhere. Retailers had to discard products. Federal agencies also warned that unsafe temperatures could harm consumers who use affected goods. The risk is especially serious for facilities holding food, blood, medicines, or other sensitive supplies.

The danger is not limited to spoilage. Officials warned that disrupted equipment can create fire hazards. This is why they recommend removing controls from the public internet, protecting remote access, separating networks, replacing default passwords, updating software, and retiring unsupported devices.

U.S. officials suspect Iran-linked hackers were behind freezer malfunctions at military commissaries. Those incidents began around late August and affected roughly six on-base grocery stores. Reuters first reported that the Pentagon was treating the failures as possible cyberattacks.

The article also cites Nahman Khayet, who said the hacks closely match a pattern associated with Iranian hackers. He noted that difficult-to-replace refrigeration equipment can be an attractive disruption target. He also said Iranian cyber operators have often exploited missing security updates in critical infrastructure.

However, the U.S. notice does not name who is responsible for the wider cyber sabotage. It describes attacks across countries and sectors without assigning them to a specific group. European authorities are coordinating with national agencies and sharing information, but the article gives no confirmed public attribution for all the incidents.

Refrigeration systems are vulnerable because their controls increasingly include digital devices connected to networks or the internet. Those devices can let operators monitor or change temperatures remotely. If exposed or poorly protected, they can also give attackers a path to alter settings or hide readings.

The agencies specifically warned about public internet exposure, remote access, default passwords, missing security updates, and equipment that manufacturers no longer support. Older systems may be difficult and expensive to replace, so organizations may continue operating them without the latest protections. That creates opportunities for attackers to exploit known weaknesses.

The recommended defenses are practical but important. Operators should remove controls from the public internet, secure required remote connections, separate refrigeration networks from business systems, replace default passwords, install updates, and retire unsupported equipment. Every organization relying on refrigeration and monitoring systems should assume it could be targeted.

Refrigeration is critical infrastructure because many essential goods depend on controlled temperatures. Grocery stores and cold-storage facilities use it to protect food. Hospitals, blood banks, pharmaceutical suppliers, chemical companies, and transportation providers also rely on refrigeration and monitoring systems.

The attacks show why this dependence matters. Refrigeration failures raised supermarket temperatures and forced retailers to discard food. Hackers also targeted three regional blood banks in France. The federal agencies warned that unsafe temperatures could harm consumers, while damaged equipment could create fire hazards. A hidden temperature reading makes these failures harder to detect.

Because these systems support several critical sectors, one cyber weakness can affect more than a single business. U.S. and European authorities are urging immediate action. Their measures include removing controls from the public internet, securing remote access, separating networks, updating software, replacing default passwords, and retiring unsupported equipment.