FBI and CISA Tell Grocery, Healthcare and Cold-Chain Operators: Pull Refrigeration Controllers Off the Public Internet
After European supermarket and blood-bank cooling hacks, U.S. agencies warn that unpatched or internet-facing temperature controllers can be forced into defrost or heating cycles. Here is what the joint advisory says and the steps it urges owners to take now.
Your freezers may not feel like cybersecurity equipment, but federal agencies say attackers are treating them that way. On Thursday, CISA, the FBI, HHS, USDA and the Department of Transportation published a joint advisory urging owners of industrial refrigeration and cold-chain monitoring systems to harden those controllers—especially anything reachable from the public internet.
The primary source is the joint fact sheet posted through the FBI’s Internet Crime Complaint Center. BleepingComputer and Recorded Future’s The Record summarize the same warning and the European incidents that prompted it.
What the agencies say is happening
- Actors are targeting electronic temperature controllers and commercial refrigeration controllers used in retail grocery and cold storage, and more broadly in healthcare, food and agriculture, chemical and transportation settings.
- Entry points called out in the advisory: authentication bypass, arbitrary code injection and weak configurations on unpatched or internet-accessible controllers.
- Once inside, attackers can change temperature settings, force continuous heating or defrost cycles, shorten equipment life, create fire hazards, spoil inventory, put consumers at risk if unsafe product is later sold, or create a “denial-of-view” condition that hides current temperatures from operators.
Why the warning landed now
Reporting tied to the advisory describes recent European incidents: roughly 250 to 350 French supermarket sites hit in October with remote defrost activation; a later wave of more than 115 stores across six countries, with some systems shutting down and others reported as high as 50°C (122°F); and a November 3 notice from France’s blood establishment (EFS) that a refrigeration equipment provider incident altered temperature and defrost settings at three blood-product facilities (staff response prevented blood loss in that case, according to related FBI messaging). U.S. military commissary freezer malfunctions are under investigation; the advisory and coverage do not establish that those events are linked to the European attacks. No one has publicly claimed responsibility for the European wave.
What owners are told to do
- Take controller panels off the public internet. If remote access is required, put it behind a maintained firewall or edge device.
- Separate operational technology onto its own network segment from business systems.
- Change default passwords, strengthen credentials, and use phishing-resistant multifactor authentication where it fits.
- Keep firmware current and plan to replace end-of-support devices.
- Allowlist which devices and IP addresses may change settings.
- Keep offline, tested backups.
- Turn on logging and review for unexpected activity; where OT logs are weak, capture network traffic to the controllers.
- Set safe temperature limits and alerts so a compromised controller cannot quietly drive equipment outside a sane range.
What this means for your company
Even a mid-size grocery, clinic, lab, restaurant group or warehouse may have a handful of smart temperature controllers that were never put on the same patch calendar as laptops and firewalls. If a vendor left a web panel open for “easy remote support,” that convenience is now a liability. Inventory every cooling controller, confirm none of them answers on the open internet, change factory passwords, and make sure temperature alarms still reach a human who can walk to the unit when the network picture looks wrong.
Need help finding internet-facing controllers, separating OT from office Wi-Fi, or building a simple cold-chain security checklist for your sites? Reach out to Layer 7 Data Solutions to discuss how we’ve helped companies similar to yours.
About The Author
