Federal agencies warn of industrial refrigeration cyberattacks

Nov 10 · FBI notes suspected hacks causing food spoilage at six U.S. military base commissaries Updated 16:36

The Hacker News reported that attackers have targeted industrial refrigeration and cold-chain monitoring systems globally. The Hacker News stated that altering temperature settings can potentially cause fire hazards and that attacks in Europe affected the French Blood Establishment, resulting in the spoilage of blood plasma. According to The Hacker News, Censys data indicates a high number of exposed controllers globally, though some specific instances have declined recently, and Censys states that industrial control system exposure is a persistent global risk to critical infrastructure. The NY Post reported that hackers remotely increased freezer and fridge temperatures in Sweden, Belgium, Luxembourg, and Estonia, which forced supermarkets to discard spoiled food. The NY Post also reported that the FBI noted suspected hacks causing food spoilage at six U.S. military base commissaries in August. Assistant Director Brett Leatherman is cited by the NY Post as part of the FBI's effort to urge U.S. organizations to secure systems using firewalls and password changes. According to the NY Post, cybersecurity experts and former FBI agents warn that U.S. supermarkets are vulnerable due to the widespread use of similar remote-access controllers.

The spoilage of blood plasma at the French Blood Establishment confirms that these vulnerabilities are active threats to life-saving medical infrastructure [1].

The risk extends beyond inventory loss to physical safety. The possibility of fire hazards caused by manipulated temperature settings suggests these controllers can be weaponized to cause physical destruction of facilities [1].

NY Post provided necessary concrete evidence of the threat's reach by reporting the suspected hacks at six U.S. military base commissaries. This moves the conversation from general commercial risk to a specific vulnerability in national security logistics.

Despite these details, coverage continues to ignore the identity of the hardware providers. The reader still lacks information on which specific brands are the primary sources of these vulnerabilities, leaving the focus on user-end mitigation rather than manufacturer accountability.