The Pentagon is investigating a series of suspected cyberattacks targeting refrigeration and food storage systems at US military bases after mysterious overnight equipment failures spoiled large quantities of food, raising concerns over a possible connection to similar attacks across Europe.
Reports of refrigeration failures emerged at as many as 14 military commissaries across the United States in late August, although at least six incidents have been independently confirmed.
The disruptions affected grocery stores operated by the Defense Commissary Agency (DeCA), which supplies food and household essentials to military personnel, veterans and their families.
At several installations, refrigeration systems malfunctioned overnight, causing temperatures inside freezers to rise and leaving large quantities of meat, dairy products and frozen food unfit for consumption.
At Fort Huachuca in Arizona, military officials reported on August 26 that the commissary’s freezers had unexpectedly entered defrost mode, heating their contents and destroying the stored food.
The Pentagon is treating the incidents as a suspected cyberattack, according to four US officials familiar with the investigation.
However, investigators have yet to establish whether hackers were responsible or identify any potential perpetrators.
US investigators coordinate with European authorities
The investigation has expanded to include coordination with European authorities following a wave of cyberattacks targeting supermarket refrigeration systems across several countries.
On Monday, November 2, more than 100 stores across Europe reported refrigeration failures, with several retailers confirming that their systems had been targeted by cyberattacks.
The latest incidents affected supermarkets in Belgium, Luxembourg, Ireland, Sweden and other European countries.
The disruptions followed a major cyberattack in France in October, when refrigeration systems at hundreds of supermarkets were compromised.
French Finance Minister Roland Lescure said approximately 700 of the country’s 10,000 supermarkets were affected.
During those attacks, hackers remotely manipulated refrigeration controls, pushing temperatures inside some units to 50 degrees Celsius (122 degrees Fahrenheit).
The extreme temperatures spoiled refrigerated products and, in some cases, caused equipment to catch fire.
Although French authorities said the attacks did not threaten the country’s overall food supply, the incidents raised serious concerns about vulnerabilities in critical food infrastructure.
The Pentagon confirmed that a unit of US Cyber Command was coordinating with other federal agencies and law enforcement authorities.
The US Army Criminal Investigation Division’s Cyber Field Office has also joined the investigation and is communicating with French law enforcement agencies.
No direct connection between the incidents in the United States and Europe has been established.
Military stores forced to discard food
Following the failures, the Defense Commissary Agency transferred temperature-sensitive products to alternative storage facilities to prevent further losses.
Affected commissaries remained open, although some temporarily restricted sales to nonperishable goods while technicians worked to restore refrigeration systems.
Naval Station Newport in Rhode Island and Fort Irwin in California were among the installations that temporarily suspended sales of refrigerated and frozen products.
Military commissaries differ from dining facilities serving troops on active duty. They operate as grocery stores offering discounted goods to eligible military personnel, retirees and their families.
Vulnerabilities in refrigeration systems raise concerns
Cybersecurity specialists have warned that internet-connected refrigeration systems could provide attackers with opportunities to interfere with temperature controls remotely.
In Europe, several affected retailers used refrigeration management technology supplied by Danish manufacturer Danfoss.
The company previously acknowledged that older refrigeration controllers and outdated software could leave equipment vulnerable to unauthorized access.
Swedish supermarket operator ICA reported that several affected stores relied on externally connected refrigeration controls.
However, investigators have not established whether the affected US military installations used the same technology.
The incidents have highlighted the potential consequences of cyberattacks against food storage infrastructure, where interference with temperature controls can destroy large quantities of supplies without physically damaging storage facilities.
US and European authorities continue investigating the disruptions, with no suspects publicly identified.
