U.S. Agencies Warn of Cyber Threats Targeting Refrigeration and Cold-Chain Systems

Five U.S. federal agencies have issued a joint warning about ongoing cyber threats targeting industrial refrigeration and cold-chain monitoring systems.

The Cybersecurity and Infrastructure Security Agency (CISA), FBI, Department of Health and Human Services (HHS), U.S. Department of Agriculture (USDA) and Department of Transportation (DOT) published a fact sheet highlighting cyber activity targeting these systems, which are widely used across healthcare, chemical, food and agriculture, and transportation sectors.

Malicious cyber actors worldwide are exploiting vulnerabilities in unpatched or internet-connected electronic temperature controllers and commercial refrigeration systems at grocery stores and cold-storage facilities.

Successful attacks could allow hackers to manipulate temperatures, potentially resulting in fire hazards, inventory losses and reduced equipment lifespan.

The agencies recommend several security measures, including removing control systems from internet access, replacing default passwords with stronger ones, installing security patches and updates, and replacing outdated devices no longer supported by vendors.

Cyberattacks against these systems are occurring across critical infrastructure sectors worldwide, threatening inventory and equipment.