Military Commissary Refrigeration Systems Face Cyber Probe
Investigators are analyzing potential digital sabotage of cooling units after similar attacks targeted hundreds of French stores.
Updated on Oct. 29, 2026 in Cybersecurity
Live Poll
Do you trust that essential infrastructure and commercial systems are protected from potential cyberattacks?
U.S. military investigators are probing potential cyberattacks on commissary refrigeration systems that triggered defrost cycles in August 2026. This investigation follows a similar, more widespread incident in October 2026 where attackers modified controls across roughly 250 French supermarkets.
Why it matters
The incidents highlight critical security risks in industrial control systems managing essential infrastructure. Vulnerabilities in standard refrigeration controllers allow unauthorized access, demonstrating how remote digital interference can compromise large-scale physical food storage.
Security firm Claroty identified vulnerabilities in Danfoss and Copeland controllers, including a hidden login that provides full unauthorized control. At least one U.S. site, Naval Air Facility El Centro, used these affected Danfoss units.
The players
U.S. Cyber Command
The unified combatant command responsible for cyberspace operations and defense of military networks.
Claroty
A cybersecurity firm specializing in the protection of cyber-physical systems and industrial control networks.
Danfoss
A multinational engineering group that produces industrial refrigeration controllers and HVAC technology.
The details
The attacks function by exploiting industrial control system vulnerabilities to force refrigeration units into a defrost cycle, rapidly raising internal temperatures. Cybersecurity researchers at Claroty uncovered a hidden administrative login within the firmware of specific Danfoss and Copeland controllers. By accessing this interface, unauthorized parties can override temperature setpoints, which caused some units in French supermarkets to reach 50°C.
Timeline
August 2026: Refrigeration failures occurred at U.S. military commissaries.
August 2026: Claroty reported refrigeration control vulnerabilities.
October 2026: Attackers targeted refrigeration systems at French supermarkets.
October 29, 2026: Pentagon officials discussed the ongoing cyberattack investigation.
The Tech Race
The attacks follow a documented trend of targeting operational technology over traditional enterprise networks to maximize physical disruption. These events parallel the 2021 Colonial Pipeline ransomware attack, highlighting that food security infrastructure remains vulnerable to remote digital manipulation.
Military personnel and shoppers at affected facilities may face intermittent availability of perishable goods due to safety protocols. Facilities must perform security audits on existing control hardware to prevent further unauthorized access to critical storage settings.
The takeaway
The security of industrial refrigeration relies heavily on patching firmware vulnerabilities in legacy controllers. Readers should monitor future incident disclosures from the Pentagon to see if these defrost-cycle exploits spread to other retail or commercial food storage networks.
Further reading
For broader trends in infrastructure protection, see our Cybersecurity coverage.
Live Poll
Do you trust that essential infrastructure and commercial systems are protected from potential cyberattacks?
