# CISA and FBI Warn That Hackers Are Manipulating Industrial Refrigeration

- URL: https://usa-24.com/refrigeration-cyberattack-warning-cisa-fbi/
- Publisher: USA 24
- Section: Cybersecurity
- Published: 2026-11-06T05:02:42.625Z
- Updated: 2026-11-06T05:02:42.632Z
- Topics: Industrial Cybersecurity, Critical Infrastructure, Food Safety, CISA, Operational Technology

> Federal agencies warn that attackers are manipulating internet-exposed refrigeration controllers, after spoiled food at European supermarkets and a suspected hack at U.S. military commissaries.

## Key takeaways

- Hackers overrode temperature controls on commercial refrigeration at more than 350 French establishments according to Nextgov-cited reporting, though a secondary account puts the figure at 250 to 350.
- On November 5, CISA, the FBI, HHS, USDA and DOT urged operators to remove internet-exposed control systems from the internet and put operational technology on a dedicated VLAN.
- The Pentagon is treating August freezer malfunctions at at least six U.S. military commissaries as a suspected hack, but it has not publicly confirmed a cyberattack.
- Cooling controls at three French national blood banks were also tampered with, and no group has claimed responsibility for the European attacks.
- The Register reported it knew of no documented digital attacks on refrigeration systems in American supermarkets, and the FBI had not answered its question about attempted attacks.

On Monday, November 2, temperatures inside one European supermarket reportedly climbed as high as 50°C (122°F), enough to spoil the food in its cases. That store was not alone. Hackers overrode temperature controls on commercial refrigeration equipment at more than 350 French establishments, forcing supermarkets to discard spoiled food, according to [Nextgov](https://www.nextgov.com/cybersecurity/2026/10/pentagon-investigates-suspected-cyberattack-behind-military-freezer-failures/416926/).

On Thursday, November 5, the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, the Department of Health and Human Services, the Department of Agriculture and the Department of Transportation issued a refrigeration cyberattack warning in a joint [fact sheet](https://www.cisa.gov/news-events/news/cisa-fbi-hhs-usda-and-dot-urge-critical-infrastructure-strengthen-industrial-refrigeration-and-cold). It targets industrial refrigeration and cold chain monitoring systems. The warning follows weeks of incidents in Europe and a Pentagon probe of U.S. base freezers that became public in late October. For grocers, hospitals and food transporters, a controller problem has become a supply problem.

## What the refrigeration cyberattack warning says

The fact sheet names several weaknesses attackers could exploit: authentication bypass, arbitrary code injection and weak configurations in unpatched or internet-accessible temperature and refrigeration controllers. Its most direct instruction is to remove control system devices and systems from the internet altogether. The agencies also recommend a dedicated VLAN for operational technology devices, replacing default passwords, phishing-resistant multifactor authentication, prompt patching, retiring unsupported legacy devices, IP allow-lists, offline backups and regular log review.

Chris Butera, CISA’s acting executive assistant director for cybersecurity, framed the risk in coverage of the advisory: “Every organization that depends on refrigeration and monitoring systems should assume it could be a target.” The FBI’s Cyber Branch operations director, Brett Leatherman, said in a statement: “We are seeing these systems targeted across critical infrastructure sectors globally, putting inventory and equipment at risk.”

The exposure is wide. The advisory’s audience includes grocery chains, cold-storage warehouses, hospitals and blood banks, food and drug transporters, military commissaries and chemical facilities that rely on networked refrigeration controllers. The Food and Agriculture Information Sharing and Analysis Center has separately warned that attackers are going after internet-accessible industrial controls that may lack strong defenses.

## Europe’s supermarket freezer attacks by the numbers

| Location | When | What was reported |
|---|---|---|
| More than 350 French establishments | October into early November | Temperature controls overridden; supermarkets discarded spoiled food |
| One European store | Monday, November 2 | Temperatures reportedly reached 50°C (122°F) |
| Three French national blood banks | Not specified in reporting | Cooling controls tampered with |

The French figure needs a caveat. A [WindowsForum summary](https://windowsforum.com/news/fbi-and-cisa-warn-of-industrial-refrigeration-cyberattacks-cold-chain-security-checklist.451144/) citing BleepingComputer puts the number of affected French supermarkets at 250 to 350. The two counts have not been reconciled, so treat the higher number as a reported figure, not a verified total.

CNBC reported that other retailers discarded food as well. No group has claimed the attacks, and responsibility remains unknown. The blood bank tampering is the most sensitive detail in the European reporting, though connections between the incidents remain unclear. Monday’s incident and the links between the October and November waves are still under investigation.

Reuters reported that experts had previously told it the French attack appeared easy to pull off. The agency also noted that hackers have sabotaged fridges and freezers in the United States and elsewhere before. That history suggests the weakness is not new. What is new is the federal government putting its name behind a formal warning.

## The U.S. military commissary freezer failures

Reuters reported on October 29 that the Pentagon is treating a spate of freezer malfunctions as a suspected hack, citing four officials familiar with the matter. The late-August malfunctions affected at least six commissaries, the on-base stores where service members buy food. Reuters reached that count by reviewing the bases’ Facebook posts and website updates, according to its [report](https://www.usnews.com/news/world/articles/2026-10-29/exclusive-pentagon-treating-military-base-freezer-malfunctions-as-suspected-cyberattack-officials-say).

At Fort Huachuca in Arizona, officials reported that a freezer entered defrost mode and heated its contents, leaving the food spoiled. A Pentagon statement said a unit of Cyber Command was “working in close coordination with interagency and law enforcement partners.” It did not elaborate. [Military Times](https://www.militarytimes.com/pentagon/2026/10/29/pentagon-treating-military-base-freezer-malfunctions-as-suspected-cyberattack-officials-say/) carried the same details.

Several gaps remain. The Pentagon has not publicly confirmed a cyberattack, and Reuters could not establish which controller brands the bases used. Whether the U.S. failures and the European attacks are linked is still unclear. The U.S. incidents happened in August, before the European wave drew wide attention, and the Pentagon’s probe predates the federal advisory.

## Whether American grocery fridges have been hacked

Not in any publicly documented way so far. [The Register](https://www.theregister.com/security/2026/11/05/feds-warn-grocers-dont-chill-on-cyber-defenses-as-freezer-hacking-spree-heats-up/5307978) reported that it was not aware of any documented digital attacks against these systems in American supermarkets. The FBI had not responded to its question about attempted attacks at the time of publication. That silence calls for caution rather than comfort, because the absence of public reports does not show whether an attempt was made and stopped.

The advisory covers industrial and commercial systems, not the refrigerator in your kitchen. For shoppers, the realistic risk is indirect. The likely effects are spoiled food and disrupted supply, which is what the European stores experienced.

## What operators should do this week

1. Check your own exposure. Confirm whether any refrigeration controller or monitoring dashboard can be reached from the internet, and remove it from public access.
2. Move operational technology devices onto separate network segments.
3. Replace default passwords and turn on phishing-resistant multifactor authentication.
4. Patch what can be patched, and retire legacy controllers that no longer receive support.
5. Keep offline backups so you can recover if a controller is manipulated.
6. Monitor temperatures through a source independent of the controller, so you can spot a system doing something it should not.

Add IP allow-lists to limit who can reach any system that must stay online, and review logs on a regular schedule.

## What shoppers can do and what comes next

Shoppers have little they can do directly. If a store has unusually warm cases, visibly spoiled product or an unexplained closure, report it to your local health authorities. Those reports help officials tell isolated equipment failures apart from a pattern.

Several questions will shape the next phase. Watch whether the FBI answers the Register’s question about attacks on American supermarkets, whether the Pentagon names a cause for the August failures, and whether French investigators assign responsibility. Watch also whether the 250-to-350 and 350-plus counts get reconciled, and whether CISA updates its fact sheet as more incidents surface. The answers will show whether this is a short-lived spree or the start of a sustained campaign against the systems that keep food and medicine cold.

## Frequently asked questions

### Are American supermarket fridges being hacked?

The Register reported it was not aware of any documented digital attacks against refrigeration systems in American supermarkets. The FBI had not responded to its question about attempted attacks when the story was published. The federal advisory covers industrial and commercial systems, so shoppers face mainly indirect risk such as spoiled food or disrupted supply.

### What did the CISA and FBI refrigeration advisory recommend?

The agencies urged operators to remove internet-exposed control systems and put operational technology on a dedicated VLAN. They also recommended replacing default passwords, enabling phishing-resistant multifactor authentication, patching promptly and retiring unsupported legacy devices. Offline backups, IP allow-lists and regular log review round out the guidance.

### Did hackers cause the military commissary freezer failures?

That has not been confirmed. Reuters reported on October 29 that the Pentagon is treating the August freezer malfunctions at at least six commissaries as a suspected hack, citing four officials. The Pentagon has not publicly confirmed a cyberattack, and a Cyber Command unit is working with law enforcement and interagency partners.

### Who is behind the European refrigeration attacks?

Responsibility is unknown, and no group has claimed the attacks. Reporting has not established whether the French supermarket incidents are connected to the tampering at three French national blood banks. Investigators are still examining the links between the October and November waves.

## Sources

1. [CISA, FBI, HHS, USDA, and DOT Urge Critical Infrastructure To Strengthen Industrial Refrigeration and Cold Chain Monitoring Systems Cybersecurity](https://www.cisa.gov/news-events/news/cisa-fbi-hhs-usda-and-dot-urge-critical-infrastructure-strengthen-industrial-refrigeration-and-cold)
2. [Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up (The Register)](https://www.theregister.com/security/2026/11/05/feds-warn-grocers-dont-chill-on-cyber-defenses-as-freezer-hacking-spree-heats-up/5307978)
3. [U.S. Warns of Ongoing Cyberattacks Targeting Refrigeration Systems (SOFX)](https://www.sofx.com/u-s-warns-of-ongoing-cyberattacks-targeting-refrigeration-systems/)
4. [FBI and CISA Warn of Industrial Refrigeration Cyberattacks: Cold-Chain Security Checklist (WindowsForum, citing BleepingComputer)](https://windowsforum.com/news/fbi-and-cisa-warn-of-industrial-refrigeration-cyberattacks-cold-chain-security-checklist.451144/)
5. [Exclusive-Pentagon Treating Military Base Freezer Malfunctions as Suspected Cyberattack, Officials Say (Reuters via U.S. News)](https://www.usnews.com/news/world/articles/2026-10-29/exclusive-pentagon-treating-military-base-freezer-malfunctions-as-suspected-cyberattack-officials-say)
6. [Pentagon treating military base freezer malfunctions as suspected cyberattack, officials say (Military Times)](https://www.militarytimes.com/pentagon/2026/10/29/pentagon-treating-military-base-freezer-malfunctions-as-suspected-cyberattack-officials-say/)
7. [Pentagon investigates suspected cyberattack behind military freezer failures (Nextgov/FCW)](https://www.nextgov.com/cybersecurity/2026/10/pentagon-investigates-suspected-cyberattack-behind-military-freezer-failures/416926/)
8. [Supermarket fridges hit with cyberattacks across Europe — here's what's happening (CNBC)](https://www.cnbc.com/2026/11/03/supermarket-fridges-hack-cyberattack-europe.html)