Federal agencies have issued warnings about hackers targeting refrigeration systems worldwide. This follows reports of suspected Iran-linked hackers causing freezer malfunctions at U.S. military bases.
The incidents began in late August, affecting approximately six military commissaries. Hackers reportedly forced refrigeration units into continuous heating or defrost cycles, disrupting operations.
European authorities also issued warnings after attacks on refrigeration systems. On October 11, 2026, attackers switched refrigeration units at hundreds of French supermarkets into defrost mode, leading to food spoilage.
A subsequent wave of attacks on November 2, 2026, impacted grocers in Belgium, Estonia, Ireland, Luxembourg, the Netherlands, and Sweden. Danfoss StoreView controllers were specifically targeted in these attacks.
Danfoss disclosed vulnerabilities CVE-2025-41450, CVE-2025-41451, and CVE-2025-41452 related to these incidents. The exposure of Internet-exposed refrigeration controllers decreased by 53% from October 9 to November 5, 2026.
While no group has claimed responsibility, the exploitation of these vulnerabilities has been reported.