U.S. Agencies Warn of Cyberattacks on Refrigeration Controllers

Summary

A five-agency U.S. fact sheet warns that exposed or vulnerable refrigeration controllers could be remotely tampered with, disrupting cold-chain operations. It outlines attack paths and hardening steps; attribution to Iran remains unconfirmed.

Key points

CISA, the FBI, HHS, USDA and the Department of Transportation issued the fact sheet on November 5, 2026; it names no specific product, victim or attacker.
The agencies say attackers may exploit vulnerabilities or weaknesses in unpatched or internet-reachable controllers through authentication bypass, arbitrary code injection or insecure configurations.
Potential consequences include unsafe temperature changes, spoiled inventory, equipment wear, fire hazards and loss of temperature visibility.
The article reports estimated waves of supermarket incidents in Europe and says the French Blood Establishment confirmed that an incident at a refrigeration equipment provider altered settings at three blood-storage facilities; separate coverage says blood stores were not compromised.
U.S. officials have not attributed the activity. Links to Iran are attributed to researchers and anonymous officials and remain unconfirmed.
Recommended measures include removing controllers from public internet access, isolating OT devices, securing credentials, patching or retiring end-of-life equipment, restricting connections, maintaining backups and monitoring activity.
For contractor-managed systems, the article recommends checking remote access, default credentials, support status, independent temperature alarms and records of setting changes.

Article Details

Event Type: Joint federal cybersecurity warning about attacks targeting internet-reachable or vulnerable industrial refrigeration and electronic temperature controllers.
Impact: The agencies warn that attackers who gain control could alter temperature and defrost settings, causing inventory loss, equipment wear, fire hazards, loss of temperature visibility, and potential harm to consumers or patients. Separate reporting describes estimated supermarket incidents in France and Europe, a confirmed incident affecting settings at three French blood-product storage facilities, and U.S. military freezer hacks under investigation. The article says the blood-storage incident was reportedly stopped before blood stocks were compromised; incident counts are estimates and vary by source.

Vendors

DanfossMedia reporting says some affected systems were remote-controlled Danfoss refrigeration units that no longer received security updates.

Countries

FranceThe warning follows weeks of overnight freezer incidents at supermarkets across Europe, an attack that hit blood storage sites in France and reported hacks of freezers on U.S.IranSecurity researchers have broadly linked the campaign to Iran, and U.S.United StatesFive U.S.

Industries

ChemicalIt is addressed to the Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems sectors, including refrigerated transport services.food and agricultureIt is addressed to the Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems sectors, including refrigerated transport services.Healthcare and public healthIt is addressed to the Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems sectors, including refrigerated transport services.Transportation SystemsIt is addressed to the Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems sectors, including refrigerated transport services.