Federal agencies warn of cyber threats to industrial refrigeration systems

U.S. federal agencies warned on November 5 that malicious cyber activity was targeting industrial refrigeration and cold-chain monitoring systems around the world.

The systems help organizations monitor temperatures for products such as food and medicine. The agencies said successful exploitation could change temperatures or obscure current readings, putting inventory and equipment at risk.

In their joint warning, CISA, the FBI and the departments of Health and Human Services, Agriculture and Transportation identified unpatched or internet-accessible electronic temperature and commercial refrigeration controllers among the systems being targeted. They described equipment used in retail groceries and cold-storage facilities.

The agencies’ fact sheet advises owners and operators to reduce public internet exposure, secure necessary remote access, separate operational and business networks, strengthen authentication and keep supported systems updated. CISA cybersecurity official Chris Butera urged organizations to “take action now to close known security gaps.”

Joshua Corman of the Institute for Security and Technology told CBS News that refrigeration systems used by U.S. medical labs, grocery stores and warehouses could also be vulnerable.