In mid-October and again this week , commercial refrigerator and freezer systems - largely in Europe - were targeted in cyberattacks that caused temperatures in these units to sharply rise. This activity, while not entirely unprecedented, marks a pivotal expansion from recent targeting of industrial critical infrastructure systems, such as those in the Water and Wastewater Systems Sector, to internet-accessible systems in the Food and Agriculture Sector that have a potential impact on public health.
Threat actors exploited internet-exposed industrial refrigeration controllers, such as Danfoss units, which are often configured with weak default credentials and lack remote access controls. The cyberattacks resulted in the spoilage of perishable goods, destruction of blood plasma reserves, and millions of euros in property losses and emergency stock disposal costs.
These incidents, more broadly, demonstrate how easily low-sophistication cyber threat actors can threaten vital supply chains and public health. Organizations are highly advised to prioritize the security of these systems by implementing strict network segmentation, patching systems consistently, decommissioning end-of-life/unsupported systems, ensuring OT and IoT devices are not internet-accessible when possible, enforcing multi-factor authentication for remote industrial controls, disabling public-facing web interfaces, and establishing physical analog temperature cutoffs that cannot be overridden via software alone.