US Agencies Warn Hackers Are Cooking Cold Storage Systems Through Internet-Connected Refrigeration Controls

The US Cybersecurity and Infrastructure Security Agency (CISA), the FBI and other federal agencies have issued an advisory about malicious activity targeting industrial refrigeration and cold chain monitoring systems around the world. The warning follows recent incidents in which hackers accessed internet-connected refrigeration equipment and tried to change temperature settings, with serious real-world consequences such as ruined food and medical supplies.

The incidents cited are significant. On October 11, 2026, it was reported that supermarket chains in France and elsewhere in Europe had to destroy stock after attackers compromised systems administered by provider Danfoss, reportedly setting temperatures as high as 50 °C. A similar incident on November 1 reportedly affected supermarkets in at least nine European countries. More recently, an attack on equipment provider Coolworld reportedly pushed cold storage rooms at France's National Blood Service to 110 °C.

The advisory, published on November 5, says attackers may exploit unpatched or internet-accessible controllers to force units into continuous heating and defrost cycles, causing inventory loss and equipment hazards. The agencies noted that techniques include authentication bypass, arbitrary code injection and weak configurations. Healthcare, chemical, food and agriculture, and transportation sectors are highlighted because they rely on these systems for remote monitoring, temperature logging and defrost management. The agencies also set out immediate actions for security teams, though the full list was not included in the portion of the article we reviewed.