The Federal Bureau of Investigation (FBI) and several federal agencies are warning businesses and organizations worldwide about a growing cybersecurity threat targeting industrial refrigeration and cold storage systems.
The warning follows a series of cyberattacks in Europe that disrupted refrigeration equipment at supermarkets and targeted blood storage facilities in France.
According to federal investigators, hackers have exploited security weaknesses in refrigeration controllers, potentially allowing them to manipulate temperatures, damage equipment and threaten the safety of temperature-sensitive products.
“Attackers are getting in through controllers that are unpatched, reachable from the internet or still using the default passwords listed in the manufacturer’s manual,” said Brett Leatherman, assistant director of the FBI’s cyber investigations division.
Last month, cybercriminals targeted refrigeration systems at supermarkets across France and other European countries. More recently, three national blood service facilities in France were also attacked.
In the blood bank incidents, temperature alarms alerted employees before any blood supplies were lost, according to the FBI.
The FBI issued the warning alongside the Cybersecurity and Infrastructure Security Agency (CISA), Department of Justice, Department of Health and Human Services, Department of Agriculture and Department of Transportation.
The agencies cautioned that cybercriminals are targeting industrial refrigeration equipment and cold chain monitoring systems used to transport and store products requiring controlled temperatures.
Hackers Could Cause Food Spoilage and Equipment Damage
Federal officials warned that attackers could manipulate refrigeration equipment by forcing systems into repeated heating or defrost cycles, potentially causing temperatures to rise to unsafe levels.
Hackers could also interfere with temperature monitoring systems, preventing employees from recognizing dangerous changes until products have already been compromised.
The potential consequences include spoiled food, damaged refrigeration equipment, inventory losses and even fire hazards.
The attacks could also create public health risks if food, blood products or other temperature-sensitive materials are unknowingly stored outside safe temperature ranges.
Investigators identified several potential methods used by cybercriminals, including bypassing authentication controls, injecting malicious code and exploiting improperly configured systems.
FBI Recommends Immediate Security Measures
The FBI is urging supermarket operators, food distributors, health care facilities and other businesses that depend on industrial refrigeration to strengthen their cybersecurity protections.
Recommended measures include:
- Disconnecting refrigeration controllers from the public internet whenever possible.
- Placing systems requiring remote access behind properly configured firewalls.
- Replacing manufacturer-default passwords with strong, unique credentials.
- Reviewing how equipment vendors configure and maintain connected refrigeration systems.
- Establishing safe temperature limits and ensuring alerts immediately reach responsible personnel.
- Keeping refrigeration software and controllers updated with available security patches.
Officials emphasized that equipment connected directly to the internet is particularly vulnerable when basic cybersecurity protections are missing.
European Supermarkets Report Refrigeration Temperatures Near 120 Degrees
The federal warning follows at least two separate cyberattacks involving European supermarket operators, including Ahold Delhaize.
During those incidents, attackers reportedly gained access to refrigeration systems and caused temperatures inside refrigerators and freezers to climb to approximately 120 degrees overnight.
Danfoss, a company that provides refrigeration control technology, was linked to systems targeted in both attacks.
The company subsequently recommended disconnecting affected systems from the internet while working with supermarket operators to develop stronger security protections.
Federal officials are encouraging organizations that operate refrigeration and cold storage equipment to evaluate their systems before similar attacks result in widespread inventory losses or public health consequences.
