U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses

Key Points:

• U.S. government agencies, including CISA and the FBI, have issued warnings about cyber threat actors targeting industrial refrigeration and cold-chain monitoring systems worldwide to cause service disruptions, fire hazards, and inventory loss by exploiting vulnerabilities in unpatched or internet-accessible controllers.
• Attackers manipulate temperature settings, forcing units into continuous heating or defrost cycles, which risks food spoilage, equipment damage, and consumer safety; recent incidents in Europe have affected hundreds of supermarkets and critical facilities such as the French Blood Establishment.
• Threat actors exploit authentication bypasses, arbitrary code injection, and weak configurations to gain access, prompting authorities to advise operators to strengthen authentication, update systems, isolate operational technology, change default passwords, retire legacy devices, and secure remote access.
• Data shows hundreds of refrigeration system instances remain exposed globally, with significant but incomplete reductions in vulnerable devices across Europe, highlighting ongoing risks to critical infrastructure sectors including food, medicine, and utilities.
• The advisory emphasizes that industrial control system exposure remains a persistent and critical risk to public safety and infrastructure security, underscoring the need for continued vigilance and remediation efforts worldwide.