Five federal agencies have given grocery stores, cold storage operators and other cold chain businesses a clear set of steps for securing the controllers that keep their products cold.
The agencies say malicious cyber actors are targeting vulnerabilities and weaknesses in unpatched or internet-accessible electronic temperature controllers and commercial refrigeration controllers in retail grocery and cold storage facilities.
TechCrunch also reports that some affected systems were remote-controlled refrigeration units made by Danish company Danfoss that no longer receive security updates.
The steps for operators The fact sheet's mitigations align with the Cross-Sector Cybersecurity Performance Goals from CISA and NIST.
The agencies also recommend a dedicated OT VLAN to separate refrigeration controls from business networks.