US Agencies Warn of Growing Threats to Refrigeration Systems, Urge Organizations to Take Action
In a wake-up call for organizations handling sensitive food and medical supplies, US government agencies have sounded the alarm on a growing threat to industrial refrigeration systems. Over the past few weeks, hackers have been targeting monitoring systems in supermarkets and blood banks across Europe, causing millions of dollars in losses by tampering with fridges and freezers.
The attacks, which have resulted in spoiled food and even fires, are believed to be linked to Russian hacktivist groups, although nothing has been officially confirmed. The perpetrators may exploit vulnerabilities or weaknesses in unpatched or internet-accessible controllers to remotely alter settings, forcing units into continuous heating and defrost cycles. This can cause widespread inventory loss and equipment hazards.
The US government’s warning comes after hundreds of supermarkets were hit on October 11, with temperatures in fridges being turned up to a scorching 122 degrees Fahrenheit (50 degrees Celsius). A second wave of attacks this week targeted more than 100 supermarkets and a blood bank, but fortunately, quick action from staff prevented the compromise of blood products and samples.
The affected organizations include healthcare, chemical, food, and transportation companies. According to internet intelligence firm Censys, out of 6,695 internet-exposed refrigeration controllers identified on October 9, only 3,124 (or 47%) remain accessible from the web as of November 5. The company’s analysis covers widely used Copeland/Dixell XWEB and Danfoss StoreView controllers.
The US government recommends that organizations take several steps to prevent these attacks, including taking control systems off the internet or protecting them with a firewall or edge device if web access is necessary. They also advise isolating OT devices, restricting access to trusted identities, enforcing strong password policies and phishing-resistant multifactor authentication, keeping systems updated, maintaining backups offsite, and enabling logging and monitoring.
By taking these precautions, organizations can prevent the devastating consequences of these attacks, which not only result in financial losses but also put people’s health and safety at risk. As the threat landscape continues to evolve, it’s essential for companies to stay vigilant and prioritize the security of their industrial control systems.
Source: SecurityWeek — 2026-11-06