Pentagon Investigates Potential Cyberattack on Military Commissary Refrigeration Systems
Defense officials suspect hackers triggered defrost modes in freezers across multiple U.S. military bases.
1Pentagon Investigates Freezer Malfunctions
Defense Department investigators are currently treating a series of freezer malfunctions at military bases as a potential cyberattack. Officials are coordinating with interagency partners and French authorities, who are simultaneously investigating similar incidents involving supermarket freezers in France. The investigation focuses on whether remote access was exploited to disrupt critical food storage.
2Evidence of Remote Manipulation
Reports indicate that freezers at multiple installations, including Fort Huachuca and Holloman AFB, entered unauthorized defrost modes. These systems utilize Remote Monitoring Control Systems, which are installed at 182 sites. Unlike standard power outages, these units remained powered but actively heated their contents, rendering stored food supplies unsafe for consumption.
3Vulnerabilities in Industrial Controllers
Security researchers recently identified vulnerabilities in Danfoss and Copeland control systems used for commercial refrigeration. While it remains unconfirmed if these specific models were targeted at military sites, the potential for unauthorized access to industrial controllers is high. These devices were historically designed without modern cybersecurity protections for internet-connected environments.
4Operational Technology Security Risks
The incident highlights the inherent risks of connecting legacy industrial controllers to the internet. Many programmable logic controllers were built decades ago, long before widespread awareness of cyber threats. These devices now serve as prime targets for actors seeking to cause organizational disruption or extort entities through the destruction of assets.
5Supply Chain Disruption Potential
Targeting refrigeration systems demonstrates a clear method for disrupting food supply chains. By rendering food commercially useless, attackers can cause significant logistical and financial damage. This vulnerability extends beyond military commissaries to broader agricultural and food processing industries, where downtime can lead to mass spoilage and regulatory disposal requirements.
6Comparison with French Incidents
The investigation draws parallels to recent events in France, where hackers targeted over 350 supermarket freezers. In some instances, these attacks resulted in physical fires, suggesting a high level of control over the hardware. U.S. investigators are collaborating with French police to determine if the same threat actors are responsible for both.
7Design Flaws in Legacy Systems
Industry experts note that industrial controllers were originally viewed as isolated devices serviced only by human technicians. They were never intended to function as internet-facing gateways. This fundamental design philosophy has left critical infrastructure exposed, as modern connectivity requirements have outpaced the security capabilities of the hardware currently managing essential facility operations.
8Broader Implications for Infrastructure
This suspected hack underscores the urgent need to secure operational technology across all defense and commercial sectors. As attackers shift focus toward causing physical damage through digital means, the reliance on outdated, insecure controllers becomes a strategic liability. Protecting these systems is now essential to maintaining the integrity of the entire supply chain.