US agencies warn of cyber threats to industrial refrigeration systems
Five US agencies have issued a joint warning about cyberattacks targeting internet-connected refrigeration and cold-chain monitoring systems, urging operators to strengthen the security of equipment used across critical infrastructure sectors.
On 5 November 2026, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the US Departments of Agriculture, Health and Human Services, and Transportation issued a joint warning about ongoing cyber threats targeting internet-connected industrial refrigeration and cold-chain monitoring systems.
The advisory follows reported incidents affecting supermarkets and cold-storage facilities in Europe and the United States, a blood bank in France, and military installations in the United States.
According to the agencies, attackers have exploited vulnerabilities in internet-connected controllers and remote-management interfaces to manipulate refrigeration and temperature-control settings. This access can allow them to alter operating parameters and force equipment into continuous heating or defrost cycles.
Temperature fluctuations can compromise food, medicines and other temperature-sensitive goods. The incidents could also result in significant inventory losses, equipment damage and fire hazards.
The agencies recommend that organisations remove unnecessary remote-control capabilities from direct internet exposure, separate operational technology (OT) networks from corporate IT networks, strengthen passwords, install available security updates and replace equipment that is no longer supported by manufacturers.
CISA’s acting cybersecurity chief, Chris Butera, warned that organisations relying on refrigeration and monitoring systems should consider themselves potential targets.
The US authorities have not publicly attributed the attacks. However, US officials have reportedly expressed suspicion of Iranian involvement. The Department of Defense is also investigating incidents affecting military refrigeration equipment.
The warning highlights vulnerabilities arising from the growing connectivity of industrial refrigeration systems. Remote monitoring, automated temperature regulation, predictive maintenance and centralised management can improve operational efficiency, but they also introduce potential entry points for cyberattacks. Exposed remote-access interfaces, weak or default passwords, outdated software and insufficient security updates can leave controllers and monitoring devices vulnerable.
