On 5 November 2026, CISA, the FBI, HHS, USDA and the Department of Transportation published a joint fact sheet and accompanying press release warning that they are aware of malicious cyber activity targeting industrial refrigeration and cold chain monitoring systems globally. The authoring organizations say Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems sectors widely use these systems (including refrigerated transport) for automated/remote temperature monitoring, continuous logging, defrost cycle management and energy optimization.

The fact sheet says actors are targeting electronic temperature controllers and commercial refrigeration controllers in retail grocery and cold storage facilities, and may exploit vulnerabilities or weaknesses in unpatched or internet-accessible controllers to remotely alter settings and force units into continuous heating and defrost cycles, which can cause widespread inventory loss and equipment hazards. Exploitation vectors named: authentication bypass, arbitrary code injection, and weak configurations.

Possible effects listed: change of temperature (affect service life, loss of inventory, fire hazard, or indirect consumer harm if products are consumed after unsafe storage) and loss of visibility into current temperatures (denial-of-view). Recommended mitigations (aligned to CISA/NIST Cross-Sector Cybersecurity Performance Goals) include: eliminate public internet exposure of control-system devices; isolate OT devices on a dedicated VLAN; change default passwords and enforce strong passwords plus phishing-resistant MFA where feasible; keep firmware updated and retire unsupported legacy devices; restrict access with device/IP allowlisting; and maintain tested offsite/offline backups.

CISA Acting Executive Assistant Director for Cybersecurity Chris Butera is quoted in the press release: "Every organization that depends on refrigeration and monitoring systems should assume it could be a target." FBI Cyber Branch Operations Director Brett Leatherman similarly urges organisations to review the guidance and report suspicious activity to the FBI. (source: CISA joint fact sheet and CISA press release, 5 Nov 2026)