The Pentagon is investigating whether a series of freezer failures at US military bases in August were caused by hackers, raising questions about the security of refrigeration systems used to store food.
The investigation follows a cyberattack in France in October, when attackers remotely altered temperature controls at hundreds of supermarket locations, leaving shops with spoiled fresh and frozen produce.
At least six US military commissaries, which operate as grocery stores for service members and their families, reported refrigeration problems during the late-August incidents. In one case, a freezer reportedly switched into defrost mode and heated its contents overnight, destroying food stocks.
US investigators are now examining whether the incidents were connected to a deliberate intrusion rather than ordinary equipment failures.
The Pentagon has not confirmed that hackers were responsible, nor has it established a connection between the American incidents and the French attack.
However, the involvement of military cyber investigators and communication with French authorities have brought attention to a vulnerability that extends beyond conventional computer networks: the internet-connected equipment responsible for keeping food safe.
Iran-Linked Hackers Among Suspects In US Military Freezer Investigation
The investigation has also raised questions about possible Iranian involvement. According to a separate report by Nextgov/FCW, two people familiar with the matter said US officials suspect Iran-linked hackers could be behind the incidents.
The report did not provide publicly available technical evidence establishing that attribution, and the assessment could change as investigators gather more information.
Cyber Command and defence department law enforcement units are examining the incidents. The Army Criminal Investigation Division's Cyber Field Office has also confirmed its involvement, saying it is working with French law enforcement to understand the refrigeration outages in Europe.
The Pentagon said Cyber Command was working closely with other government agencies and law enforcement partners but did not provide further details.
The possible Iranian connection remains an investigative lead, not an established conclusion. US authorities have not publicly identified the individuals responsible, explained how they accessed the equipment or disclosed whether the same attackers were involved in both countries.
The French Embassy in Washington also declined to comment when approached by Reuters.
How the French Supermarket Fridge Cyberattack Worked
During the attack on 11 and 12 October, intruders remotely changed the settings on commercial cooling equipment at more than 350 establishments, forcing supermarkets to remove spoiled products from their shelves. Some units reportedly became so hot that fires broke out.
Rather than switching the refrigeration equipment off, the attackers manipulated its temperature settings, allowing the units to heat up and food to spoil.
French supermarket operators also faced questions about the security of the systems used to manage their refrigeration equipment. Danish manufacturer Danfoss said many affected controllers were obsolete or running outdated firmware, potentially making them easier to compromise.
However, Reuters could not establish whether Danfoss equipment, or any other particular brand, was installed at the affected American military stores.
There is also no confirmed evidence that the French and American incidents involved the same hackers. The similarities in how the equipment malfunctioned have prompted investigators to examine the cases together, but matching symptoms alone cannot establish a shared perpetrator or a coordinated operation.
Why Internet-Connected Refrigeration Systems Are a Cybersecurity Risk
Refrigeration controllers were traditionally designed to be operated locally, with technicians visiting facilities to inspect equipment and make adjustments. However, many systems are now connected to the internet so operators and maintenance teams can monitor temperatures, receive alerts and manage settings remotely.
That convenience also creates another potential entry point for attackers. Bill Moore, chief executive of industrial cybersecurity company Xona Systems, told Reuters that the growing connection of these controllers to the internet has introduced security concerns. He warned that compromising refrigeration equipment could disrupt food distribution and supply chains.
The problem is not limited to supermarkets or military facilities. Danfoss has previously said that hackers targeted or accessed supermarkets in Russia and Israel in 2022 using obsolete versions of its refrigeration controllers.
In another case, US federal prosecutors charged a Ukrainian woman in December 2025 over her alleged involvement with a Russian-backed hacking group that attacked a meatpacking facility in November 2024, spoiling thousands of pounds of meat. The woman pleaded not guilty to the charges.
The Food and Agriculture Information Sharing and Analysis Center has also warned that internet-accessible industrial control systems can expose food and agricultural businesses to cyber threats.
Its concerns extend to the technology used throughout food production, processing and distribution, where equipment failures can affect operations beyond the immediate location of an attack.
The military freezer investigation now places an ordinary piece of commercial equipment under scrutiny as a potential cybersecurity concern. Whether the American incidents were deliberately engineered, and whether Iran-linked actors were involved, remains to be established.
Until investigators publish their findings, the French attack provides a documented example of the damage that compromised refrigeration controls can cause.
