Feds warn of potential cyberattacks on industrial refrigerators

The U.S. government has issued a warning regarding potential cyberattacks on industrial refrigeration systems, following a series of incidents that remotely altered temperatures of commercial freezers and fridges across Europe. Five federal agencies, including the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, Department of Health and Human Services, Department of Agriculture, and Department of Transportation, jointly released a notice on Thursday, cautioning businesses such as grocery stores and healthcare facilities to bolster their security measures.

These agencies highlighted ongoing cyber threat activity that could target refrigeration systems utilized in healthcare, agriculture, transportation, and other U.S. industries. Vulnerable unpatched systems connected to the internet are being exploited by global threat actors, who could manipulate temperatures, potentially causing physical hazards like fires, inventory losses, and reduced system lifespan.

CISA advised businesses to change passwords, isolate system devices from the internet, and implement software updates to address vulnerabilities. While no specific instances have been reported within the U.S., officials have responded to refrigeration outages at six U.S. military bases in August and incidents at grocery chains in Europe, including unexpected temperature spikes in refrigeration systems leading to spoiled food.

France's national emergency blood supply network has also been targeted by hackers attempting to alter refrigeration temperatures at blood banks. Security experts anticipate further attacks, warning that refrigeration systems employed by medical labs, grocery stores, and bulk warehouses in the U.S. remain susceptible due to the limited number of entities involved in industrial refrigeration.