# Pentagon Investigates Potential Cyberattack on Military Commissary Refrigeration Systems Defense officials suspect hackers triggered defrost modes in freezers across multiple U.S. military bases. - **Source:** [Gizmodo](https://brifing.si/source/63382431-cef0-4c41-883e-2f88dc21351e) - **Published:** 2026-10-30 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/ff08acda-e83b-4d29-9a83-3ba8056c2f84 ## Pentagon Investigates Freezer Malfunctions Defense Department investigators are currently treating a series of freezer malfunctions at military bases as a potential cyberattack. Officials are coordinating with interagency partners and French authorities, who are simultaneously investigating similar incidents involving supermarket freezers in France. The investigation focuses on whether remote access was exploited to disrupt critical food storage. ## Evidence of Remote Manipulation Reports indicate that freezers at multiple installations, including Fort Huachuca and Holloman AFB, entered unauthorized defrost modes. These systems utilize Remote Monitoring Control Systems, which are installed at 182 sites. Unlike standard power outages, these units remained powered but actively heated their contents, rendering stored food supplies unsafe for consumption. ## Vulnerabilities in Industrial Controllers Security researchers recently identified vulnerabilities in Danfoss and Copeland control systems used for commercial refrigeration. While it remains unconfirmed if these specific models were targeted at military sites, the potential for unauthorized access to industrial controllers is high. These devices were historically designed without modern cybersecurity protections for internet-connected environments. ## Operational Technology Security Risks The incident highlights the inherent risks of connecting legacy industrial controllers to the internet. Many programmable logic controllers were built decades ago, long before widespread awareness of cyber threats. These devices now serve as prime targets for actors seeking to cause organizational disruption or extort entities through the destruction of assets. ## Supply Chain Disruption Potential Targeting refrigeration systems demonstrates a clear method for disrupting food supply chains. By rendering food commercially useless, attackers can cause significant logistical and financial damage. This vulnerability extends beyond military commissaries to broader agricultural and food processing industries, where downtime can lead to mass spoilage and regulatory disposal requirements. ## Comparison with French Incidents The investigation draws parallels to recent events in France, where hackers targeted over 350 supermarket freezers. In some instances, these attacks resulted in physical fires, suggesting a high level of control over the hardware. U.S. investigators are collaborating with French police to determine if the same threat actors are responsible for both. ## Design Flaws in Legacy Systems Industry experts note that industrial controllers were originally viewed as isolated devices serviced only by human technicians. They were never intended to function as internet-facing gateways. This fundamental design philosophy has left critical infrastructure exposed, as modern connectivity requirements have outpaced the security capabilities of the hardware currently managing essential facility operations. ## Broader Implications for Infrastructure This suspected hack underscores the urgent need to secure operational technology across all defense and commercial sectors. As attackers shift focus toward causing physical damage through digital means, the reliance on outdated, insecure controllers becomes a strategic liability. Protecting these systems is now essential to maintaining the integrity of the entire supply chain. ## Sources covering this story - https://gizmodo.com/u-s-military-thinks-hackers-defrosted-all-its-ice-cream-2000832872 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._