US Agencies Warn Businesses to Lock Down Smart Freezers After Attacks Spoil Food Across Europe

The FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US agencies have issued an advisory urging owners of industrial smart freezers to disconnect them from the internet, apply patches and change default passwords. The warning follows a wave of attacks in Europe. Since mid-October, unknown attackers have compromised thousands of remote-controlled refrigeration systems across hundreds of grocery stores in France, Belgium, Ireland, Luxembourg and Sweden. Temperatures inside units were pushed as high as 50ºC (122°F), spoiling food and sparking fires.

The agencies said the attackers may exploit weaknesses in unpatched or internet-accessible controllers to remotely change settings and force units into continuous heating and defrost cycles. This can cause widespread inventory loss and equipment hazards. The FBI's Brett Leatherman said these systems are being targeted across critical infrastructure sectors globally.

The Register reported no documented digital attacks against American supermarkets, and the FBI had not responded to its questions at the time of publication. There are signs of concern, though. Ahold Delhaize, which runs US chains including Food Lion, Giant Food and Stop & Shop, took IT systems offline after a cyberattack last month. Reuters also reported the Pentagon is treating freezer malfunctions at US military bases in August as a suspected cyberattack.