The Pentagon is investigating whether freezer failures at several US military bases in August were caused by a cyberattack after food spoiled at military commissaries across the country.
At least six commissaries, which are grocery shops serving military personnel and their families, reported refrigeration problems. Reuters reported on 29 October that four officials familiar with the matter said investigators were treating the unusual failures as a possible hacking incident.
A cyberattack has not been confirmed as the cause. US authorities have not publicly identified a suspect or established that the failures were deliberately caused.
What happened at the military bases?
In late August, refrigeration equipment malfunctioned at military installations across the United States. Some sites temporarily stopped selling affected chilled or frozen products while staff dealt with spoiled stock.
The circumstances at Fort Huachuca in Arizona raised particular questions. According to an official installation update cited by Reuters, a commissary freezer entered defrost mode overnight and heated its contents, leaving food unfit for sale. Military Times previously reported refrigeration problems at seven Army, Navy and Air Force installations, although Reuters established at least six affected commissaries.
The incidents do not establish that an external attacker changed the controls. Equipment faults, operational errors and other explanations have not been publicly ruled out.
What the Pentagon and investigators have said
In response to Reuters, the Pentagon said that a unit of US Cyber Command was working with other government agencies and law enforcement. The US Army Criminal Investigation Division confirmed that its Cyber Field Office was involved.
Army CID spokesperson Thomas Hamilton also confirmed to Task & Purpose that investigators were working with the Defense Commissary Agency and the Defense Criminal Investigative Service (DCIS) to establish what happened. US investigators have been communicating with French law enforcement about separate refrigeration incidents in Europe.
The authorities have not disclosed the investigation’s findings, the precise method by which the US equipment malfunctioned or who might be responsible.
Why are investigators looking at France?
On 11 and 12 October, attackers interfered with connected refrigeration systems at hundreds of supermarkets in France. The Paris prosecutor’s office confirmed a large-scale cyberattack affecting food retailers, with spoiled goods and some fires reported. French authorities opened a criminal investigation.
Reuters reported that investigators in the United States were consulting their French counterparts. That cooperation does not mean that the incidents have the same cause, that the same equipment was used or that the same perpetrators were responsible.
How could a freezer become a cybersecurity target?
Commercial refrigeration equipment often uses digital controllers to regulate temperatures, schedule defrost cycles and enable maintenance. Some controllers can be accessed remotely. If those systems are exposed to the internet or use outdated software, an attacker may be able to interfere with physical equipment rather than simply steal data.
Cybersecurity researchers examining the French incidents have raised concerns about older, remotely accessible refrigeration controllers. However, the Pentagon has not confirmed the make of the equipment at the affected US bases or whether a software vulnerability was exploited.
The wider concern is practical: disrupting cold storage can destroy food, force temporary closures and interfere with supplies without requiring an attack on traditional military computer networks.
What we know and what remains unconfirmed
- Freezer and refrigeration failures affected at least six US military commissaries in August.
- Some stock was spoiled, including after a freezer entered defrost mode at Fort Huachuca.
- US military cyber and criminal investigators are examining the incidents.
- A cyberattack as the cause, any perpetrator and a connection to the confirmed French attacks remain unproven.
