Pentagon probes suspected cyberattack on freezers at US military commissaries, linked to Danfoss-controller hacks at 350+ French stores
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 30/10/2026 00:07; os links antigos trazem para cá.
The Pentagon is investigating whether a cyberattack caused freezer failures that spoiled food at commissaries on at least six US military bases in August 2026, according to four officials cited by Reuters (olhardigital.com.br, securityaffairs.com). Affected sites include Fort Irwin, F.E. Warren, Naval Station Newport, Columbus, Travis and Fort Huachuca (securityaffairs.com). In at least one case temperatures were raised overnight. On 26 August, Fort Huachuca (Arizona) reported a freezer entering defrost mode and warming its products, a case first surfaced by the blog Signal and Silence (olhardigital.com.br). A unit of US Cyber Command and the Army Criminal Investigation Division Cyber Field Office are coordinating with interagency, law-enforcement and French authorities over a similar incident that manipulated temperature controls at more than 350 French retail sites. That incident forced frozen goods to be thrown away and in some cases caused units to catch fire, with losses potentially in the tens of millions of euros (securityaffairs.com). No attribution has been made and the stage of the investigation has not been disclosed.
Entenda a falha
A vulnerabilidade
No CVE or specific bug is named. The weakness described is exposure: refrigeration controllers built for on-site maintenance are reachable from the internet. In the French case the manufacturer was Danfoss; olhardigital reports Danfoss said several controllers were obsolete or ran outdated firmware, while securityaffairs says Danfoss did not reply. Attackers raised temperatures at 350+ French stores and at commissaries on at least six US bases. Reuters could not confirm which brands were used at the US bases. No affected or fixed versions are given.
Como funciona
The articles do not describe technical steps. As reported, a controller meant for local maintenance is connected to the internet, and someone with access changes its temperature control. Rather than shutting units down, the attackers raised temperatures to maximize spoilage. At Fort Huachuca on 26 August a freezer went into defrost mode and warmed the food; in France some units overheated and caught fire. The access method has not been disclosed.
Por que é vulnerável
According to the articles, the causes are operational: controllers designed for on-site maintenance were exposed to the internet, and obsolete units or outdated firmware stayed in service (the latter per Danfoss, as quoted by olhardigital). Experts told Reuters the intrusion looked simple to carry out. No code-level defect or fix is described. Recommended mitigations are removing internet exposure, retiring obsolete units, updating firmware, segmenting OT from IT, strong authentication and monitoring setpoint changes.
Como foi descoberta
The incidents surfaced through operations and press reporting, not a vulnerability report. Fort Huachuca posted about the defrost case on 26 August, and the blog Signal and Silence reported the failures and possible sabotage on 28 August. Reuters, citing four officials, then reported the Pentagon treats them as a suspected hack. A US Cyber Command unit and the Army CID Cyber Field Office are working with French authorities. A public research report on Danfoss controllers predates the incidents, but nothing links it to the bases. Danfoss says similar attacks hit Russia and Israel in 2022. No attribution has been made.
Explicação gerada por IA a partir da matéria e dos artigos, em 30/10/2026 00:22.
Detalhes técnicos
- In both the US and France, the pattern was to manipulate refrigeration controllers to raise temperatures rather than shut the units down. This maximizes spoilage and, in France, caused fires (securityaffairs.com).
- Experts told Reuters the intrusion appeared simple to execute (olhardigital.com.br).
- In the French case the controller manufacturer was Danfoss. The brand used at the US bases is unknown, and Reuters could not confirm whether Danfoss or other brands were installed there (olhardigital.com.br, securityaffairs.com).
- A public research report on Danfoss controllers was published before the incidents, but no link to the military bases has been established (securityaffairs.com).
- ICS specialists flag the internet exposure of refrigeration controllers originally designed for on-site maintenance as the core issue (olhardigital.com.br).
- In 2022, attackers hit supermarkets in Russia and Israel using obsolete versions of Danfoss cold-storage controllers (olhardigital.com.br, securityaffairs.com).
- In December 2025, Los Angeles federal prosecutors charged a Ukrainian woman as part of a group that disrupted refrigeration at a meat-processing plant in 2024, destroying over 900 kg of meat (olhardigital.com.br, securityaffairs.com).
Remediação
- Inventory internet-exposed refrigeration/HVAC and other OT/ICS building controllers, and remove that exposure.
- Retire obsolete units and update outdated firmware.
- Segment the controllers from general IT networks, enforce strong authentication, and monitor for unauthorized setpoint changes (securityaffairs.com).
- Align food-safety and IT/OT security teams, as the Global Food Safety Initiative recommended in early 2026 (olhardigital.com.br, securityaffairs.com).
Relatos divergentes
- Scope: Both sources say at least six commissaries were affected. securityaffairs.com, the more recent, adds that some reports count up to 14 sites across 11 states; this is not confirmed by the officials cited.
- Danfoss position: olhardigital.com.br says Danfoss stated that several controllers in the affected French equipment were obsolete or running outdated firmware. securityaffairs.com, published later, says Danfoss did not reply to press inquiries. The Danfoss statement is therefore not corroborated by the later source.
Linha do tempo
-
Pentagon probes August freezer failures at US military commissaries as suspected cyberattack, links to French supermarket hack
ler a análise desta fonte ocultar
The Pentagon is treating a series of freezer malfunctions that spoiled food at US military base commissaries in August as a suspected cyberattack, according to four officials cited by Reuters. At least six commissaries were affected in late August — Fort Irwin, F.E. Warren, Naval Station Newport, Columbus, Travis and Fort Huachuca among them — with some reports counting up to 14 sites across 11 states. In at least one case the freezers were not simply shut down: temperatures were raised overnight, and Fort Huachuca reported its freezer entered defrost mode and heated the stored food. US investigators, including a unit of US Cyber Command and the Army Criminal Investigation Division Cyber Field Office, are coordinating with French law enforcement over a similar attack that raised cooling temperatures in more than 350 French supermarkets, emptying frozen aisles and in some cases causing units to catch fire, with losses potentially in the tens of millions of euros. Attribution remains unknown and the investigation's progress is undisclosed.
Technical Details
The attack pattern in both the US and France involved manipulating refrigeration controllers to increase temperatures rather than disabling the units, maximizing spoilage and in France causing fires. In the French case the targeted controller manufacturer was Danfoss, which did not reply to press inquiries; the brand used at US bases is unknown. A public research report on Danfoss controllers was published before the incidents, but no link to the military bases has been established. Danfoss has previously reported that attackers hit supermarkets in Russia and Israel in 2022 by exploiting outdated cooling controllers, and in December 2025 US prosecutors accused a Ukrainian woman of belonging to a group that disrupted refrigeration at a meat plant in 2024.
Remediation
Operators of commercial refrigeration and other OT/ICS building systems should inventory internet-exposed cooling controllers, update outdated firmware, segment them from general IT networks, enforce strong authentication and monitor for unauthorized setpoint changes. The Global Food Safety Initiative has urged food safety and IT leaders to jointly protect refrigeration systems.
-
Pentagon probes suspected cyberattack on military base commissary freezers; linked to French supermarket refrigeration hacks
ler a análise desta fonte ocultar
The Pentagon is investigating whether a cyberattack caused refrigeration failures at commissaries on at least six US military bases in August 2026, spoiling food, according to four officials cited by Reuters. In one case the freezer temperature was raised overnight; on 26 August, Fort Huachuca (Arizona) reported a freezer entering defrost mode and warming products, a case first surfaced by the blog Signal and Silence. A unit of US Cyber Command and the Army Criminal Investigation Division Cyber Field Office are coordinating with interagency, law-enforcement and French authorities over a similar incident in which temperature controls were manipulated at more than 350 French retail sites, forcing disposal of frozen goods and in some cases causing units to catch fire. No attribution or investigation stage has been disclosed.
Technical Details
Experts told Reuters the intrusion appeared simple to execute. Danfoss stated that several controllers in the affected French equipment were obsolete or running outdated firmware, which could have eased unauthorized access; Reuters could not confirm whether Danfoss or other brands were installed at the US bases. The core issue flagged by ICS specialists is the internet exposure of refrigeration controllers originally designed for on-site maintenance. Danfoss also noted that in 2022 attackers hit supermarkets in Russia and Israel using obsolete versions of its cold-storage controllers. In December 2025, Los Angeles federal prosecutors charged a Ukrainian woman as part of a group that disrupted refrigeration at a meat-processing plant in 2024, destroying over 900 kg of meat.
Remediation
Inventory and remove internet exposure of refrigeration/HVAC controllers, retire obsolete units and update firmware, and align food-safety and IT/OT security teams as recommended in early 2026 by the Global Food Safety Initiative.