US government agencies, including CISA and the FBI, have issued warnings about cyberattacks targeting refrigeration and cold chain monitoring systems. The attacks have reportedly exploited vulnerabilities in internet-accessible controllers, often using default credentials as an attack vector.
Recent incidents in Europe involved hackers remotely altering temperature settings in refrigeration units. This led to significant food spoilage and potential hazards, particularly affecting hundreds of supermarkets in France, where temperatures increased to 50°C (122°F), resulting in millions in losses.
Russian hacktivist groups have been implicated in these attacks, although the exact source remains unconfirmed. The initial incident was reported on October 11, 2026, with a second wave of attacks occurring on November 2, 2026.
The attacks have caused significant disruptions in critical sectors such as healthcare and food supply. Organizations are advised to secure their systems by removing internet access and enforcing strong authentication measures.
As of November 5, 2026, many exposed refrigeration controllers have been taken offline, but vulnerabilities persist. CISA, the FBI, HHS, USDA, and DoT are aware of malicious cyber actors targeting electronic temperature controllers and commercial refrigeration controllers.