Cold Chain in the Crosshairs: CISA and FBI Warn on Refrigeration Control Systems

On 12 November 2026, CISA, the FBI and the US Departments of Health, Agriculture and Transportation published a joint fact sheet. The message is aimed at the food supply chain and other critical sectors: strengthen the security of industrial refrigeration systems and cold chain monitoring. According to CISA's Chris Butera, any organization that depends on these systems "should assume it could be a target".

What happened in Europe

The alert stems from concrete incidents, reported by FoodNavigator based on AFP and BBC. Between 11 and 12 October, attackers reportedly took control of the refrigeration systems of hundreds of French supermarkets. Temperatures allegedly climbed as high as 120°F (about 49°C), and food worth millions of euros was lost.

On 9 November, French Foreign Minister Jean-Noël Barrot publicly attributed the attack to Iran's Revolutionary Guards (IRGC), describing it as "unprecedented in both its scale and its level of aggression". This is an accusation by the French government, as reported by the press: it has not been independently verified.

Between 2 and 3 November, a second wave reportedly hit more than 100 retail chains in seven countries: Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland. According to the BBC, the method appeared to be the same. The sources consulted report no incidents in Italy.

The situation in the United States

In late August, more than six US military commissaries lost refrigeration. The cause is still under investigation and has not been confirmed as a cyber incident. The source article also considers it likely that small-scale attacks have already occurred in the US.

How the attackers operate

According to CISA, criminals exploit outdated or internet-reachable controllers, authentication bypass, code injection and weak configurations. Once inside, they change parameters remotely and force units into continuous heating and defrost cycles. The result is widespread product loss and risk to equipment. Cold storage warehouses can be targeted too, not just retail stores.

Why it matters to manufacturers

For a food or meat processing company, cold rooms, blast chillers and temperature monitoring are not ancillary services: they are part of the production line, the HACCP plan and traceability. A compromised batch or a tampered temperature log immediately affects quality, compliance and costs. It is a concrete case of connected OT being used to cause physical and economic damage.

Recommended measures

The guidance is simple, but it requires discipline:

• use strong authentication;
• keep systems up to date;
• identify all systems reachable from the internet;
• remove unnecessary remote access and secure what remains.

What to do in the coming days

For poultry and meat plants, including those in Italy, a practical first step is an inventory: which temperature controllers and gateways are visible from outside? Who has remote access, with which credentials and through which paths, including those used by maintenance vendors? The same applies to monitoring and connectivity platforms, which must follow the same hardening rules as the controllers they read.

Remote access is useful, but it must be secured.

Note: this article is based on a single source, of which only the opening section was consulted; further recommendations or details may not be reported here.