By yourNEWS Media Newsroom
WASHINGTON — The Department of War is investigating suspected cyberattacks on refrigeration systems at U.S. military installations after overnight malfunctions spoiled food supplies at multiple bases, with researchers identifying possible disruptions at as many as 14 installations and federal officials examining whether hackers deliberately manipulated freezer temperatures.
The incidents occurred primarily in late August and affected at least six military commissaries, the government-operated grocery stores serving service members, retirees and their families. Investigators are examining whether the simultaneous equipment failures resulted from unauthorized access to internet-connected refrigeration controls rather than ordinary mechanical problems, according to an Oct. 29 Reuters investigation.
A subsequent Nov. 2 report by the Daily Mail said independent researchers had documented suspicious refrigeration outages at as many as 14 military bases, although federal investigators have publicly confirmed a smaller number of affected commissaries. The full extent of the incidents, including the amount of food destroyed and the financial losses, remains under investigation.
One of the clearest examples occurred at Fort Huachuca, Arizona, where commissary employees discovered that refrigeration equipment had unexpectedly entered a heating cycle overnight. On Aug. 26, the installation informed customers that its freezers had switched into defrost mode, ruining the stored food.
The commissary explained that its freezer “went into defrost mode where it heated up all the food. Trust us when we say it was ‘spoiled.’”
Similar refrigeration failures were documented at Army, Navy and Air Force installations, with some commissaries temporarily suspending sales of frozen or refrigerated products while technicians assessed the damage. The Defense Commissary Agency reportedly transferred certain food supplies to alternative temperature-controlled facilities to limit additional losses, while affected stores continued selling products that did not require refrigeration.
The military publication Task & Purpose reported that the Defense Criminal Investigative Service, the law enforcement agency operating under the Department of Defense inspector general, is leading a joint investigation involving military criminal investigators and cybersecurity personnel.
“We are aware of speculation regarding a potential cyber incident,” a defense official told the publication. “The Defense Criminal Investigative Service (DCIS), the criminal investigative arm of the [Department of Defense] Office of Inspector General, is leading a joint investigation. For security reasons, we do not comment on ongoing law enforcement investigations.”
Army Criminal Investigation Division spokesman Thomas Hamilton confirmed that investigators were coordinating with the Defense Commissary Agency and federal authorities to determine the cause of the failures. The military’s cybersecurity organizations are also examining whether refrigeration control systems were accessed remotely.
“Army CID is also working with DCIS and French law enforcement in understanding the refrigeration outages in Europe,” Hamilton said.
The investigation has taken on additional significance following reports that American intelligence officials suspect Iranian involvement. According to a Nov. 2 investigation published by Defense One, two people familiar with the inquiry said U.S. authorities were examining whether hackers connected to Iran had deliberately interfered with refrigeration systems at military installations.
The suspected Iranian connection remains preliminary, and officials have not publicly established who caused the outages or how the affected equipment may have been compromised. Investigators are considering whether vulnerabilities in digital temperature controllers enabled unauthorized users to remotely alter operating settings.
Those concerns have intensified following confirmed cyberattacks against commercial refrigeration systems in Europe. French authorities reported that hackers manipulated temperature controls at hundreds of supermarkets in October, causing significant food spoilage and, in some instances, overheating equipment sufficiently to start fires.
French Finance Minister Roland Lescure subsequently told lawmakers that approximately 700 supermarkets had been affected. Similar incidents were reported in Sweden, Belgium and other European countries, suggesting that digital vulnerabilities in commercial refrigeration infrastructure may extend across national boundaries.
According to Reuters’ Nov. 2 report on the European attacks, supermarket operators experienced sudden temperature increases after unauthorized parties apparently gained access to external refrigeration management systems. Some retailers were forced to dispose of frozen products, while others temporarily closed refrigerated sections as technicians restored normal operations.
Several affected European businesses used temperature-control equipment supplied by Danish manufacturer Danfoss. Security specialists have warned that older refrigeration systems connected to the internet may contain outdated software or improperly secured remote-access functions, creating opportunities for attackers to change operating temperatures without physically entering a facility.
Investigators have not established that the American military incidents and European supermarket attacks were conducted by the same individuals or organization. However, the apparent similarities have prompted information-sharing between U.S. military investigators and European law enforcement agencies.
The potential security implications extend beyond the immediate destruction of frozen food. Military commissaries provide discounted groceries to service members and their families, and prolonged interruptions could increase household costs and complicate access to essential supplies, particularly at remote installations.
The affected commissaries are distinct from military dining facilities responsible for feeding personnel living in barracks, and officials have not reported that the incidents disrupted military operations or deprived deployed troops of food. Nevertheless, cybersecurity specialists say the malfunctions demonstrate how attacks against ordinary commercial infrastructure could affect military communities without directly targeting classified networks or weapons systems.
Wes Bryant, a former Air Force special operations member who previously worked on civilian harm assessments at the Pentagon, told Task & Purpose that reliable food distribution is an important component of military readiness.
“If you take away service members’ ability to eat in the U.S., that effectively ends or deeply impacts our operations, full stop,” Bryant said. “This is our Achilles’ heel in some regards. A lot of troops won’t work with no access to food.”
Cybersecurity researchers have increasingly warned that internet-connected industrial equipment can provide attackers with opportunities to disrupt essential services. Refrigeration systems, water-treatment facilities, electrical equipment and other operational technologies frequently rely on remote monitoring and control software that may not receive the same cybersecurity protections as conventional computer networks.
The Food and Agriculture Information Sharing and Analysis Center has identified internet-accessible industrial controllers as a potential vulnerability in food production and distribution networks. Compromising such equipment can cause significant physical damage or economic losses even when attackers do not obtain sensitive information.
For the Pentagon, the investigation now centers on determining whether the August incidents were coordinated, how many installations were affected and whether malicious actors gained control of refrigeration equipment through shared technical vulnerabilities.
Authorities have not announced arrests, identified confirmed perpetrators or disclosed evidence establishing that the failures were part of a coordinated foreign operation. The suspected Iranian connection also remains an investigative assessment rather than a publicly established finding.
The incidents have nevertheless exposed potential weaknesses in systems supporting military installations and civilian food distribution. As investigators compare evidence from American bases with the European attacks, the findings could influence future cybersecurity requirements for refrigeration equipment and other digitally controlled infrastructure.
The investigation remains active, with military officials withholding further details while federal and international law enforcement agencies examine the suspected intrusions.
Original article
Comments