Pentagon Investigates Potential Cyberattack on Military Commissary Freezers
Defense officials suspect hackers triggered defrost modes, causing widespread food spoilage across multiple bases.
1Suspected Cyber Sabotage
Pentagon officials are investigating a series of freezer malfunctions at military bases occurring throughout August. Investigators suspect these incidents, which caused food spoilage, were deliberate hacks. The Department of Defense is currently coordinating with law enforcement and French authorities, who are managing similar supermarket freezer attacks that occurred earlier this month.
2Evidence of Remote Manipulation
The blog Signal and Silence identified 14 reported outages across 11 states, with at least six confirmed by Reuters. Reports from Fort Huachuca indicated freezers entered a forced defrost mode rather than suffering power loss. These units utilize Remote Monitoring Control Systems, which are installed at 182 Defense Commissary Agency sites.
3Vulnerability in Refrigeration Controllers
Security researchers from Claroty Team82 recently identified vulnerabilities in Danfoss and Copeland control systems used for commercial refrigeration. While it remains unconfirmed if the affected military sites utilize these specific models, the potential for unauthorized access to industrial controllers remains a primary focus for investigators analyzing the widespread equipment failures.
4International Parallels and Impact
The French incident involved over 350 stores and resulted in physical fires, highlighting the severity of such breaches. At F.E. Warren AFB, anecdotal reports suggest deli freezers reached temperatures between 160 and 180 degrees Fahrenheit. This extreme heating confirms the intent to render food supplies unusable through deliberate, unauthorized remote manipulation.
5Legacy Industrial Security Risks
These incidents underscore the persistent danger of legacy industrial controllers, or operational technology, which were never designed for internet connectivity. Many programmable logic controllers lack modern security features, making them attractive targets for threat actors. These devices were historically viewed as isolated hardware, not gateways susceptible to global network-based cyberattacks.
6Supply Chain Disruption Mechanics
Attackers leverage the vulnerability of food systems to cause significant organizational disruption and financial loss. By rendering food unsafe, they force immediate disposal of inventory. This tactic mirrors risks in agricultural processing, where downtime in dairy facilities necessitates dumping raw milk supplies if processing systems remain offline for over 72 hours.
7Design Flaws in Infrastructure
Bill Moore, CEO of Xona Systems, noted that industrial designers originally treated controllers as isolated devices serviced by humans. This fundamental design philosophy failed to anticipate the risks of modern internet integration. Consequently, the long tail of vulnerable, internet-facing controllers provides a massive, insecure attack surface for malicious actors globally.
8Urgency of System Reviews
The Pentagon is currently reviewing all relevant information regarding these malfunctions with high urgency. As investigators collaborate with French police, the focus remains on identifying the perpetrators and securing the Defense Commissary Agency's infrastructure. This event serves as a critical reminder of the fragility inherent in modernizing essential military supply chains.