Federal agencies are warning grocery retailers, cold-storage businesses and other operators to secure refrigeration controls after detecting malicious cyber activity against the systems worldwide.
The November 5 joint federal advisory says attackers are targeting electronic temperature controllers and commercial refrigeration controllers. Unpatched devices and systems exposed to the internet are at risk.
A successful intrusion could force continuous heating or defrost cycles, spoil inventory, create fire hazards or leave staff unable to see current temperatures. These are potential consequences identified by the agencies. The fact sheet does not name victims, identify a responsible group or give a count of compromised installations.
The warning comes from CISA, the FBI and the departments of Health and Human Services, Agriculture and Transportation. It addresses equipment used across food, healthcare, chemical and transport operations, including refrigerated transport.
What operators should do now
The agencies call for immediate action:
- Remove control devices from the public internet. Protect necessary remote access with updated firewalls or edge devices.
- Separate operational equipment from business networks.
- Replace default passwords, use strong authentication and install current firmware.
- Limit which devices and addresses can change settings. Maintain tested offline backups and review logs.
- Set safe temperature-control limits and alerts for deviations.
The document is an operator cybersecurity alert, not a product-specific food recall. It does not establish that a shopper's food has been compromised.
U.S. organizations can report suspicious activity through FBI IC3 or CISA at 844-729-2472. Healthcare operators can also contact HHS at [email protected] about potential medical-supply disruptions.
