U.S. Agencies Urge Refrigeration System Hardening After European Cooling Attacks

CISA, the FBI, HHS, USDA, and the Department of Transportation warned of malicious cyber activity targeting industrial refrigeration and cold chain monitoring systems worldwide. The warning follows remote attacks on hundreds of European supermarkets that raised refrigeration temperatures and potentially spoiled millions of euros worth of food. Cooling controls at three French national blood banks were also tampered with, though connections between the incidents remain unclear and responsibility for the European attacks is unknown.

The agencies warned that attackers could exploit authentication bypass, arbitrary code injection, and weak configurations in unpatched or internet-accessible temperature and refrigeration controllers. Successful attacks could alter temperature setpoints, force continuous heating or defrost cycles, or eliminate temperature visibility, risking inventory losses, equipment damage, fire hazards, and consumer harm. Operators should remove unnecessary internet exposure, restrict and secure remote access, isolate operational technology networks, strengthen authentication, update firmware, and monitor controller activity and temperature setpoints.