US Agencies Warn of Cyberattacks on Refrigeration Systems

Five U.S. federal agencies have issued a joint warning about refrigeration cyberattacks, saying threat actors are targeting refrigeration controllers and electronic temperature controllers in retail grocery and cold storage facilities. The fact sheet, released on 5 November 2026 by CISA, the FBI, HHS, USDA and the Department of Transportation, warns that attackers can remotely alter settings and push units into continuous heating and defrost cycles.

The document does not name products, victims or attackers, and does not attribute the activity to a specific group. The alert notes three access paths: authentication bypass, arbitrary code injection and weak configurations, with default credentials mentioned only in its mitigations.

The warning follows a wave of incidents linked to chilled-food and blood-storage operations in Europe and the U.S. Fewer than the article’s summary states which path was used in which incident, and it does not indicate that default credentials were necessarily the entry point. Potential consequences listed include temperature changes that compromise stored goods, loss of inventory, accelerated wear on equipment, fire risk, loss of visibility into temperatures and indirect harm to consumers.

France’s CERT-FR has previously flagged remotely managed, internet‑exposed refrigeration controllers, with some reports pointing to Danfoss units, though the U.S. fact sheet does not single out any vendor. The document also outlines eight mitigations and urges incident reporting to CISA, the FBI’s IC3 or HHS for healthcare entities, including details such as date, location and equipment type.