Introduction

The U.S. military is facing an unusual investigation after a series of freezer malfunctions at commissaries across multiple states raised suspicions of cyber intrusion. Pentagon officials are treating the incidents as a potential hack, linking them to a broader cyber event that disrupted supermarket refrigeration in France.

What Happened

In August, investigators documented at least 14 reported freezer outages at military installations in 11 states, with the Signal and Silence blog first flagging the pattern. Reports indicate that at Fort Huachuca in Arizona, freezers entered a defrost mode that heated contents, leaving food spoiled. The Defense Commissary Agency (DeCA) requires defrost control through its Remote Monitoring and Control System, which is deployed at 182 sites, including 14 locations on the outage list. The blog also noted that commissaries at Holloman AFB, Fort Irwin, and Naval Station Newport all posted notices about refrigeration failures. Compounding the issue, security researchers from Claroty Team82 identified vulnerabilities in Danfoss AK-SM 800A and Copeland XWEB Pro freezer control systems devices used to centrally manage commercial refrigeration. While it remains unclear whether affected DeCA sites use those exact systems, Reuters confirmed Danfoss controllers were central to the French incident, which impacted over 350 stores and resulted in fires in some cases.

Why This Matters

Industrial controllers and programmable logic controllers have long been the backbone of food production and storage infrastructure, yet many were designed before widespread internet connectivity, leaving them exposed to modern threats. If confirmed as a cyberattack, the incident would underscore how quickly food supply chains can be disrupted when OT systems are compromised. Experts note that forcing freezers to defrost or shutting down refrigeration can spoil massive quantities of goods, halt production, and create costly supply chain bottlenecks. Bill Moore of Xona Systems told Reuters that controllers were originally viewed as isolated devices, not internet gateways, a mindset that now leaves them vulnerable to extortion or sabotage.

Key Takeaways

  • Pentagon investigators are treating August freezer malfunctions at military bases as a suspected cyber incident, with links to a French supermarket hack.
  • At least 14 outages across 11 states were reported, with freezers entering unintended defrost modes or shutting down entirely.
  • The DeCA's RMCS system is installed at 182 sites, and vulnerabilities in Danfoss and Copeland control systems have been publicly disclosed.
  • Industrial control security is a growing concern, as outdated designs and internet exposure create risks for food safety and supply chain stability.
  • Experts warn that downtime or temperature spikes in commercial refrigeration can lead to spoilage, financial loss, and operational disruption across the food industry.

Conclusion

The military's probe into suspected hacker activity targeting commissary freezers highlights a broader vulnerability in industrial infrastructure. As OT systems become increasingly connected, the risk of cyber-driven food spoilage and supply chain disruption grows. Ongoing coordination between Cyber Command, law enforcement, and industry partners will be critical in determining the source of the incidents and preventing future occurrences.