On 5 November the FBI and CISA, together with the US departments of Health and Human Services, Agriculture and Transportation, issued a joint advisory on attacks against industrial refrigeration and cold-chain monitoring systems. The FDA published its own warning the same day.
What the agencies describe
Attackers are going after controllers that are unpatched, directly reachable from the internet, or protected only by default passwords. Once in, they can force continuous defrost or heating cycles and hide the temperature readings that staff rely on. The advisory lists spoiled inventory, damaged equipment, fire hazards and unsafe storage of medical products as possible outcomes. The FDA adds that recovery could take anywhere from days to months.
Why now
The warning follows the October attack on French supermarkets and the November wave across six more European countries. In France, a refrigeration supplier to the national blood service was also targeted; a technician intervened before any blood products were affected. Separately, the Pentagon is examining freezer failures at military commissaries as possible cyber events. No attack on a US supermarket has been publicly confirmed.
Who should act
- Grocery chains with centrally managed refrigeration
- Pharmacies storing insulin and vaccines
- Hospital blood banks and laboratories
- Food production and distribution warehouses
Recommended actions
- Remove refrigeration controllers from the public internet; put necessary remote access behind a firewall.
- Change default passwords and use strong authentication.
- Apply vendor updates promptly.
- Separate these systems from business networks.
- Set safe temperature limits and confirm alarms reach people who can respond.
- Report suspected incidents to CISA or the FBI.
One practical addition from the food-safety side: independent temperature monitors on a separate (for example cellular) connection, because a compromised system may not raise its own alarm.