Freezers at military bases across the country mysteriously started heating up and ruining food. Now federal investigators are looking into a possible cyberattack, and something remarkably similar is happening in Europe.
Of all the things you'd expect the Pentagon to be investigating, somebody messing with the frozen food probably isn't high on the list.
But here we are.
Federal investigators are trying to figure out whether hackers were responsible for a string of bizarre refrigeration failures at military bases across the country.
The incidents happened in August, when freezers at several military commissaries suddenly malfunctioned. In some cases, the equipment reportedly went into defrost mode, leaving frozen food spoiled by the following morning.
And these weren't ordinary grocery stores.
They were commissaries, the on-base stores where service members, military retirees, and eligible military families buy their groceries.
Now the military's cyber specialists and criminal investigators are involved, and they're comparing notes with authorities in France, where hackers have already demonstrated that supermarket freezers can be remotely manipulated.
Yes, apparently hacking a freezer is a thing now.
And as ridiculous as that sounds, the consequences aren't particularly funny.
The Freezers Didn't Just Stop Working. Some Started Heating Up.
The trouble began in late August, when commissaries at several military installations reported refrigeration problems within days of one another.
At least six stores were affected, according to a September 1 report from Stars and Stripes. Other contemporary reporting identified additional installations that had experienced outages.
The affected locations included bases in Arizona, California, Wyoming, Mississippi, and Rhode Island.
But one incident in particular caught attention.
At Fort Huachuca, Arizona, officials reported that the commissary's freezers had entered defrost mode overnight.
Instead of keeping the food frozen, the equipment warmed up.
By morning, the contents were ruined.
The base explained in an August 26 Facebook post that the freezers had heated the food and left it spoiled.
That's a pretty unusual problem to have across multiple military installations in the same week.
A freezer breaking down at one store isn't exactly headline news. Equipment fails all the time.
But several commissaries reporting refrigeration problems around the same time, with some describing unexpected defrost cycles?
That's worth investigating.
The disruptions forced some stores to stop selling refrigerated and frozen products temporarily, leaving customers limited to shelf-stable groceries.
At Fort Irwin in California, officials announced that repairs had been completed and that emergency food orders were being arranged to replenish supplies.
Military families looking to buy groceries were suddenly dealing with empty refrigerated sections, spoiled food, and uncertainty about when normal service would resume.
Not exactly what you expect when shopping on a military base.
So, Did Somebody Actually Hack Them?
That's what investigators are trying to establish.
On October 29, Reuters reported that the Pentagon was treating the freezer failures as suspected cyberattacks, citing four officials familiar with the situation.
The Army Criminal Investigation Division's Cyber Field Office is involved, along with other Defense Department investigative agencies and military cyber personnel.
The Defense Criminal Investigative Service has been identified in reporting as the lead investigative agency.
A Pentagon spokesperson confirmed that a unit of U.S. Cyber Command was coordinating with law enforcement and other government partners.
That is considerably more attention than your average broken freezer receives.
But here's the important part.
Nobody has publicly confirmed that the U.S. military commissaries were hacked.
Investigators haven't identified a culprit, announced a verified method of attack, or established that the incidents were deliberately caused.
Mechanical failures, system errors, and other explanations haven't been publicly ruled out.
So anyone claiming that a foreign government has already been caught sabotaging American military food supplies is getting ahead of the evidence.
What investigators do know is that the refrigeration failures were unusual enough to warrant a serious investigation.
And developments overseas have made the question considerably more interesting.
Meanwhile, Hackers in France Were Turning Supermarket Freezers Into Ovens
In October, supermarkets across France experienced a confirmed series of cyberattacks targeting commercial refrigeration equipment.
These weren't simply power outages or broken compressors.
Attackers remotely manipulated temperature controls, causing refrigerators and freezers to heat up rather than keep food cold.
Some systems reportedly reached temperatures above 122 degrees Fahrenheit.
That's not a freezer anymore.
That's a pretty terrible place to keep ice cream.
Hundreds of French stores were affected, with retailers forced to throw away enormous quantities of meat, dairy products, frozen foods, and other perishables.
Some incidents reportedly caused fires, adding property damage to an already expensive mess.
French authorities launched an investigation, while the country's cybersecurity agency examined vulnerabilities in the refrigeration systems.
In some affected stores, outdated equipment and software weaknesses appear to have created opportunities for attackers.
The financial damage was substantial, with retailers reporting losses running into millions of euros.
And this is where the American military investigation becomes particularly interesting.
The timing and behavior of the refrigeration failures have similarities.
Both involved commercial-scale cooling equipment behaving in ways that ruined food.
And both raised questions about whether internet-connected refrigeration systems could be manipulated remotely.
U.S. investigators have been communicating with French authorities to better understand what happened there.
That doesn't mean the two incidents were carried out by the same people.
No such connection has been established publicly.
But investigators have a pretty good reason to compare the cases.
And Now It's Happening in More European Countries
If the French attacks sounded like an isolated incident, the news from November 2 suggests otherwise.
Supermarkets in Sweden, Belgium, Luxembourg, Estonia, and Ireland reported new problems involving refrigeration systems, with several incidents attributed to or suspected of involving cyberattacks.
Some stores discovered that their cooling equipment had been set to temperatures around 122 degrees Fahrenheit.
In Sweden, supermarket chains ICA and Coop reported refrigeration problems at a limited number of stores.
In Belgium, Carrefour reported that refrigeration equipment at 15 of its more than 700 stores had been affected.
Delhaize also reported an IT incident affecting refrigeration systems at stores in Belgium and Luxembourg.
In Estonia, an attacker reportedly accessed a computer controlling refrigeration equipment at a Selver supermarket and raised its temperature setting to 122 degrees.
Fortunately, the incident was detected quickly, and the store avoided significant damage.
Ireland's SuperValu chain also reported a refrigeration-related cyber incident affecting 13 stores, forcing some chilled and frozen products off shelves.
These developments have prompted additional investigations and security warnings.
And while the incidents resemble the earlier French attacks, investigators haven't publicly established that they're all connected, much less that they're connected to the American military commissary failures.
Still, the fact that refrigeration systems are now being targeted across multiple countries is concerning.
Not because hackers are particularly interested in frozen peas.
Because the same technology helps keep enormous amounts of food safe for consumption.
Wait, Why Are Grocery Store Freezers Connected to the Internet?
That's actually a fair question.
Most people probably picture a commercial freezer as a bigger version of the one sitting in their kitchen.
You plug it in, set the temperature, and hope nobody leaves the door open.
But large commercial refrigeration systems can be considerably more complicated.
Many use digital controllers that monitor temperatures, manage defrost cycles, send alerts, and allow technicians to diagnose problems remotely.
Some can even be adjusted over a network without anyone physically standing beside the equipment.
That makes sense from a maintenance standpoint.
A supermarket with dozens of freezers doesn't want employees manually checking every machine around the clock.
But connecting physical equipment to computer networks also introduces potential security problems.
If someone gains unauthorized access to an inadequately protected controller, they may be able to change settings or interfere with normal operation.
Imagine somebody sitting at a computer and telling a freezer to stop freezing.
The equipment might still appear to be running, but the temperature could rise enough to ruin everything inside.
The attackers in France reportedly exploited weaknesses associated with older or inadequately secured refrigeration equipment.
Some systems had outdated software or lacked current security updates.
That doesn't mean every internet-connected freezer is vulnerable, and it doesn't establish how the American incidents happened.
It does show why cybersecurity isn't just about protecting passwords, emails, or bank accounts anymore.
Sometimes the thing being targeted is an actual machine doing a very ordinary job.
Like keeping your chicken nuggets frozen.
Why Would Anyone Target Military Grocery Stores?
That's another question investigators haven't publicly answered.
There is no confirmed motive because, at this stage, there isn't even a confirmed attacker behind the American incidents.
But if someone deliberately interfered with military commissary refrigeration, the damage could extend beyond an expensive pile of spoiled groceries.
Commissaries provide shopping services to military communities and their families.
When refrigeration systems fail, stores can lose inventory, restrict sales, and spend time and money repairing equipment and replacing products.
It's an inconvenience for shoppers and a financial headache for store operators.
A deliberate attack could also demonstrate weaknesses in the computerized systems that support everyday operations on military installations.
And that would raise a bigger question.
If relatively ordinary equipment such as refrigerators can be disrupted remotely, what other essential systems might need closer scrutiny?
Water treatment equipment, heating and cooling systems, manufacturing machinery, and other industrial devices increasingly rely on networked controls.
Security specialists have been warning about vulnerabilities in these kinds of systems for years.
The concern isn't that every connected machine is about to be hacked.
It's that organizations sometimes treat devices as ordinary equipment when, in reality, they're also computers that need protection.
That distinction matters when a malfunction can spoil food, shut down services, or damage expensive infrastructure.
Is This Some Kind of Foreign Cyberattack?
There is no publicly confirmed evidence identifying a foreign government, criminal organization, or individual as responsible for the U.S. commissary failures.
And that's worth emphasizing because stories involving military facilities and suspected hacking tend to attract speculation.
It would be easy to jump straight to claims about Russia, China, or some elaborate campaign against American military installations.
But without evidence, those are guesses.
The Pentagon has not publicly announced that a hostile nation was behind the incidents.
Nor has it established whether the American failures were caused by outside interference at all.
The confirmed attacks in France, and the more recent incidents reported elsewhere in Europe, demonstrate that refrigeration systems can be targeted.
They don't identify who, if anyone, interfered with the American commissaries.
Until investigators release more information, the responsible answer is that the cause remains unresolved.
The Military Has Bigger Things to Worry About Than Ice Cream. That's Exactly Why This Matters.
On the surface, the whole thing sounds absurd.
The Pentagon is investigating freezers.
Somewhere, people whose jobs involve national security are examining why military grocery stores suddenly couldn't keep food cold.
It's tempting to laugh at that.
But the story raises a serious issue that doesn't get nearly as much attention as hacked bank accounts or stolen personal information.
Modern infrastructure depends on an enormous number of ordinary computerized systems.
Some control the temperature of food. Others regulate industrial equipment, building ventilation, or essential utilities.
They aren't particularly exciting until something goes wrong.
And when they do go wrong, the damage can become very real, very quickly.
The incidents in Europe have already demonstrated how much trouble someone can cause by interfering with commercial refrigeration.
Now U.S. investigators are trying to determine whether anything similar happened on American military bases.
Maybe the commissary failures turn out to have an innocent technical explanation.
Maybe investigators discover evidence of deliberate interference.
Either way, the investigation is worth following.
Because if someone really did figure out how to remotely sabotage freezers at military installations, that suggests a security problem extending well beyond the frozen food aisle.
For now, the Pentagon has a freezer mystery on its hands. And nobody has publicly explained who, or what, turned up the heat.
1 Comments
How is security this bad!
ReplyDelete