FBI and CISA Warn of Looming Cyber Threats to Industrial Refrigeration Systems

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have issued a joint warning about the increasing risk of cyberattacks on industrial refrigeration and cold-chain monitoring systems, emphasizing the critical nature of these systems in various sectors such as healthcare and retail ¹².

According to the agencies, attackers are taking advantage of vulnerabilities in unpatched or internet-accessible electronic temperature controllers and commercial refrigeration management systems, posing significant risks to businesses and consumers alike ¹². These exploits can lead to inventory loss, shortened equipment lifespan, fire hazards, and unsafe storage conditions, potentially disrupting essential services and causing financial losses ¹².

Chris Butera, CISA’s Acting Executive Assistant Director for Cybersecurity, has advised that any organization relying on refrigeration and monitoring systems should view themselves as potential targets ¹. This includes medical laboratories, grocery stores, and bulk warehouses in the United States, where recent incidents have highlighted the susceptibility of these systems to cyber threats ².

In October, approximately 250 to 350 French supermarkets were affected by attacks that triggered defrost functions and increased temperatures, leading to potential spoilage of goods ¹. A subsequent wave of attacks in November impacted over 115 stores across six European countries, with some refrigeration systems shutting down entirely ¹. Additionally, the French Blood Establishment reported a cybersecurity incident that altered temperature and defrost settings at three facilities storing blood products, underscoring the critical importance of secure refrigeration systems in healthcare ¹.

U.S. military bases also faced challenges, experiencing refrigeration outages in August, while Europe saw recent disruptions in food retailers located in Luxembourg, Belgium, and Sweden ². These events highlight the widespread impact of such cyberattacks and the need for robust protection measures.

To mitigate these risks, U.S. agencies recommend several steps: removing refrigeration controllers from public internet access, securing remote access points, changing default passwords, applying security updates, and isolating operational technology systems from business networks ¹. By implementing these precautions, organizations can significantly reduce their vulnerability to cyber threats and ensure the continued safe operation of their refrigeration systems.

What we know

• - The FBI and CISA issued a joint warning about cyberattacks on industrial refrigeration and cold-chain monitoring systems ¹²
• - Attackers exploit unpatched or internet-accessible electronic temperature controllers and commercial refrigeration management systems ¹²
• - Consequences include inventory loss, reduced equipment lifespan, fire hazards, and unsafe storage conditions ¹²
• - Approximately 250 to 350 French supermarkets experienced attacks in October, raising temperatures and triggering defrost functions ¹
• - Over 115 stores across six European countries faced a second wave of attacks in November, with some systems shutting down ¹
• - French Blood Establishment confirmed a cybersecurity incident affecting refrigeration equipment providers, altering temperature and defrost settings at three facilities ¹
• - U.S. agencies recommend several protective measures for refrigeration systems ¹
• - Six U.S. military bases experienced refrigeration outages in August ²
• - Recent refrigeration outages affected food retailers in Luxembourg, Belgium, and Sweden ²
• - France's national emergency blood supply network faced an attack on its refrigeration systems ²
• - Medical labs, grocery stores, and bulk warehouses in the U.S. may be susceptible to similar attacks ²