U.S. Warns Refrigeration Hacks Threaten Food, Blood and Military Freezers
U.S. agencies warn hackers are manipulating internet-connected refrigeration, threatening food, blood supplies, military freezers and cold-chain safety.
Summary
On Nov. 5, 2026, CISA, the FBI, and the Departments of Agriculture, Health and Human Services, and Transportation warned that hackers are compromising internet-connected refrigeration and cold-chain monitoring systems in grocery stores and cold storage facilities. The attacks threaten food, agriculture, transportation and medicine shipping by forcing continuous heating or defrost cycles, potentially destroying inventory, shortening equipment life and creating fire hazards.
Two recent attack waves raised temperatures at refrigeration sites across the United Kingdom and Europe, spoiling food and produce in at least a dozen countries. Targets included remote-controlled units from Danish manufacturer Danfoss, which had stopped supplying security updates. Attackers also heated donated blood storage at a French blood bank but were stopped before supplies were compromised, while the U.S. Department of Defense is investigating attacks on military freezers. Washington has not formally attributed the campaign, although researchers broadly link it to Iran and U.S. officials reportedly suspect Iran. Agencies urged operators to disconnect remote controls from the internet, strengthen passwords, apply available patches and retire unsupported equipment. CISA acting cybersecurity chief Chris Butera said every organization dependent on refrigeration or monitoring systems should assume it could be targeted.
Positives
- French responders stopped attackers before increased temperatures compromised donated blood supplies.
- CISA, the FBI and three federal departments issued coordinated mitigation guidance on Nov. 5, 2026.
- The Department of Defense is investigating attacks targeting U.S. military freezers.
- Operators can reduce exposure by disconnecting remote controls, strengthening passwords, installing available patches and retiring unsupported equipment.
Risks & concerns
- Two attack waves spoiled food and destroyed produce across at least a dozen countries in the United Kingdom and Europe.
- Forced heating and defrost cycles could cause inventory losses, shorter equipment life and fire hazards.
- Danfoss had stopped providing security updates for some remote-controlled refrigeration units targeted by hackers.
- Food, agriculture, transportation, medicine shipping, blood storage and military operations all depend on vulnerable refrigeration systems.
- The United States has not formally identified the attackers, although Iran is broadly suspected.