Security News Federal Agencies Warn of Cyberattacks Targeting Refrigeration and Cold Chain Systems Across Critical Infrastructure

[Brownie2019]

Content source

https://www.hstoday.us/subject-matter-areas/cybersecurity/federal-agencies-warn-of-cyberattacks-targeting-refrigeration-and-cold-chain-systems-across-critical-infrastructure/

CISA, FBI, HHS, USDA and DOT urge organizations to secure refrigeration and cold chain monitoring systems against ongoing cyber threats that could damage equipment and spoil temperature-sensitive supplies.
The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of Transportation (DOT) published a fact sheet that warns organizations of ongoing cyber threat activity targeting industrial refrigeration and cold chain monitoring systems. Critical infrastructure sectors that widely use these systems include Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems.

Globally, malicious cyber actors are targeting vulnerabilities and weaknesses in unpatched or internet-accessible electronic temperature controllers and commercial refrigeration controllers in retail grocery and cold storage facilities. If successfully exploited, the actors could change the temperature and possibly cause physical impacts such as fire hazards, loss of inventory and changes to the service life of the system. The fact sheet provides recommended best practices and protections against this threat activity such as:

• Remove control system devices and/or systems from the internet.
• Change default passwords and strengthen passwords.
• Apply patches and keep devices and systems updated.
• Identify, retire, and replace legacy devices that the vendor no longer supports.

“In close collaboration with our government, industry and international partners, CISA is actively tracking this threat activity,” said CISA Acting Executive Assistant Director for Cybersecurity Chris Butera. “Every organization that depends on refrigeration and monitoring systems should assume it could be a target. We urge you to review the joint fact sheet and take action now to close known security gaps.”

“Industrial refrigeration and cold-chain monitoring systems protect food, medicine, and other temperature-sensitive products, making them attractive targets for malicious cyber actors,” said FBI Cyber Branch Operations Director Brett Leatherman. “We are seeing these systems targeted across critical infrastructure sectors globally, putting inventory and equipment at risk. This fact sheet provides clear, practical steps that network defenders can take to reduce that risk and protect operations. The FBI urges every organization that relies on these systems to review our guidance, implement the recommended mitigations, and report any suspicious activity to the FBI.”

 

[Bot]

Hi Brownie2019, this is an important OT warning because compromising a temperature controller can cross quickly from “computer problem” into damaged equipment, spoiled food or medicine, and consumer safety risks.

One useful distinction: the agencies report observed targeting of retail grocery and cold-storage controllers globally; the wider healthcare, chemical, food, and transport sectors are at risk because they use the same kinds of systems. That does not mean every cold-chain operator has been compromised. The CISA fact sheet identifies authentication bypass, code injection and weak configurations as attack paths, with possible continuous heating/defrost cycles and loss of temperature visibility.

For operators, I would prioritize:

1. Find every controller, management panel and vendor-support gateway reachable from the public internet.
2. Remove direct exposure. If remote access is essential, use a maintained gateway or VPN, phishing-resistant MFA, source-IP restrictions and individual accounts.
3. Separate refrigeration OT from business networks with enforced firewall rules—not merely a VLAN label. A VLAN without filtering is mostly administrative interior decorating.
4. Replace default credentials, patch supported firmware and plan replacement of end-of-life controllers.
5. Constrain allowable setpoints and alert on changes, repeated defrost commands, lost telemetry and unusual logins.
6. Keep tested configuration backups and, for high-consequence stock, use independent calibrated temperature monitoring.

If tampering is suspected, staff should not trust the controller display alone. They should verify temperatures independently, preserve logs and configurations, follow the appropriate food/medicine safety procedures, and report the activity through their incident-response channels.

Sources

• US Government Partners Urge Hardening Industrial Refrigeration ...