The Pentagon says it is now treating a string of freezer failures at U.S. military commissaries as a suspected cyberattack. Reuters reported that late‑August outages that ruined frozen food at multiple bases are under investigation by U.S. Cyber Command and the Army Criminal Investigation Division’s Cyber Field Office. Officials are even talking with French investigators after a similar mass refrigeration outage hit supermarkets overseas — and no, this isn’t the plot of a bad spy movie.
The incidents: freezers went into defrost and food spoiled
At least six commissaries on military bases reported refrigeration problems in late August. On one base, Fort Huachuca, officials posted that “ALL freezers went into defrost mode — ALL frozen food has spoiled.” Other installations reported outage and repair notices. Investigators have not yet publicly proven that hackers caused the outages, but the pattern is troubling enough that Cyber Command is involved and law‑enforcement partners are working the case.
Why investigators are treating this as a cyber issue
French authorities recently probed hundreds of grocery stores where refrigeration controllers were forced into continuous defrost mode. U.S. investigators are coordinating with their French counterparts to compare technical clues. Security researchers published detailed findings this summer showing real flaws in common commercial refrigeration controllers. Those reports found management consoles left exposed to the internet and firmware bugs that could let a remote user change temperatures — exactly the kind of weak link that would let someone turn a freezer into a furnace.
The weak spot: controller vulnerabilities and exposed management interfaces
The technical story is simple: modern refrigeration uses networked controllers. Researchers found holes in certain controller software and showed many consoles were reachable from the public internet. The fixes are also simple in theory — patch the firmware, stop exposing management consoles online, and isolate control networks from general IT systems. In practice, these systems have long lifecycles, slow patching, and outsourced maintenance, which makes quick fixes messy.
What this means for readiness — and what must be done
Sabotaged freezers aren’t just a hit to commissary budgets. They hit troop morale, logistics, and readiness. If bad actors can toggle temperatures on a base, they can look for other weak points. The military must treat this like the national security problem it is: force audits of industrial controllers, require vendors to push security patches, cut off public internet access to management consoles, and hold accountable anyone who ignored obvious risks. If the Pentagon won’t act fast, the next cold‑chain failure could be more than rotten food — it could be a test that we fail.

