Cyberattacks on Refrigeration Systems Prompt U.S. Warning
Summary
U.S. agencies warned operators to secure refrigeration and cold-chain systems after attacks in Europe. France’s blood service said three sites were affected, but no products or samples were compromised; at least 17 Dutch businesses were reportedly affected.
Key points
- CISA, the FBI, and three other federal agencies issued a warning on November 5 urging operators to secure industrial refrigeration and cold-chain monitoring systems.
- France’s national blood service confirmed that monitoring and control systems at three cold-storage sites were affected; staff intervened before blood products or samples were compromised.
- After attacks reached the Netherlands on November 2, at least 17 businesses—mainly butcher shops and small neighborhood stores—reportedly had refrigeration systems compromised; major supermarket chains were reportedly unaffected.
- Danfoss said affected systems remained accessible through unsecured connections and used default passwords. It had advised Dutch customers to disconnect systems from the public internet and reconnect through a secure network.
- The agencies warned that attackers may exploit authentication bypass flaws, code-injection vulnerabilities, or weak configurations to change temperatures or force heating or defrost cycles.
- Recommended safeguards include keeping control panels off the public internet, isolating operational equipment, changing default passwords, using strong authentication, patching firmware, replacing unsupported devices, and setting temperature limits and alerts.
- For home appliances, the article recommends reviewing remote access, account protections, and access permissions, and keeping firmware and apps updated.
Article Details
- Event Type
- Cyberattacks on supermarket refrigeration systems and cold-storage monitoring and control systems, followed by a US federal warning urging operators to secure industrial refrigeration and cold-chain systems.
- Impact
- Refrigeration systems at three French blood-storage sites were affected, but staff intervened before any blood products or samples were compromised. In the Netherlands, at least 17 businesses—mainly butcher shops and small neighborhood stores—reportedly had refrigeration systems compromised; major supermarket chains were reportedly unaffected. The US agencies warned that successful attacks could alter temperatures or force equipment into continuous heating or defrost cycles.
Vendors
Countries
FranceThe warning follows cyberattacks on supermarket refrigeration systems across Europe. Separately, France’s national blood service confirmed that the monitoring and control systems at three of its cold-storage sites hadNetherlandsA Danfoss spokesperson told NOS that most stores followed the advice. When similar attacks reached the Netherlands on November 2, major supermarket chains were reportedly unaffected. At least 17 businesses, mainly