Photo via hindustantimes.com
Pentagon probes cyberattack on military freezers amid readiness push
At least six US military commissaries suffered suspicious refrigeration failures in August; Pentagon now investigating as possible cyberattack after similar attacks hit French supermarkets.
What happened
The Pentagon is investigating suspected cyberattacks on freezers at military commissaries across the United States in late August, after freezers at six bases switched into defrost mode overnight and spoiled thousands of dollars in food. The incident affected Fort Huachuca in Arizona, Fort Irwin in California, Holloman Air Force Base in New Mexico, Naval Station Newport in Rhode Island, Little Rock Air Force Base in Arkansas, F.E. Warren Air Force Base in Wyoming, and Robins Air Force Base in Georgia.
At Fort Huachuca, the base's commissary posted on August 26 that a freezer "went into defrost mode where it heated up all the food." In at least one case, investigators found that freezer temperatures had been deliberately raised overnight rather than equipment simply failing. The Defense Commissary Agency and Defense Criminal Investigative Service initially investigated, but the Pentagon's Cyber Command is now leading a joint probe into whether malicious activity caused the failures.
The US investigation has drawn parallels to a separate cyberattack that hit over 350 French supermarket freezers on October 11-12, with temperatures reaching approximately 50 degrees Celsius (122 Fahrenheit) and some units catching fire. Military investigators are coordinating with French law enforcement to determine if the incidents are connected. The French attack exploited vulnerabilities in refrigeration controllers made by Danish company Danfoss; security researchers had published details about authentication-bypass flaws in the AK-SM 800A model in August.
Pentagon officials emphasized that Cyber Command is "working in close coordination with interagency and law enforcement partners," though investigators have not publicly identified who orchestrated the attacks or confirmed a definitive link between the US and French incidents. The Pentagon has not confirmed the specific refrigeration equipment used at US bases or whether they share the same vulnerabilities as the French systems.
Chanakya's Move
The freeze attacks expose a strategic gap in US military logistical resilience: critical supply systems rely on networked controllers vulnerable to remote exploitation. If confirmed as coordinated strikes, this signals an actor capable of targeting dispersed US military infrastructure with precision and willing to accept the reputational cost of disrupting American food supplies. The timing—months before public disclosure, coinciding with Pentagon efforts to harden bases for 90-day autonomous operation—suggests either an opportunistic probe of US vulnerabilities or deliberate signaling of reach into US military logistics. The connection to the French attack matters: it could indicate a single sophisticated actor testing controller vulnerabilities across two target sets, or merely parallel exploitation of the same public Danfoss flaws. France is a NATO ally, making transatlantic coordination on attribution urgent. An adversary betting on this scenario would assume the US prioritizes attribution and proof over deterrent posture, buying time for follow-up operations. Conversely, if no link emerges, US officials gain less valuable intelligence from the US incidents alone, and must rely on French intelligence for clues about attacker motive and capability.