Pentagon probes commissary refrigeration failures as potential cyberattack risk

Pentagon probes commissary refrigeration failures as potential cyberattack risk
Pentagon eyes cyber risks

Refrigeration failures at several U.S. military commissaries in August are drawing heightened scrutiny as cyber risks spread beyond traditional networks into connected physical systems. The review gains urgency after hackers disrupted freezer controls at hundreds of French supermarkets earlier this month, although no proof yet links the two incidents.

Highlights

  • Pentagon confirmed a joint investigation led by the Defense Criminal Investigative Service into August refrigeration outages at commissaries on at least seven U.S. military bases.
  • French retailers Carrefour, Monoprix, and Intermarché suffered refrigeration system hacks raising temperatures to 122°F, causing fires and $300,000 in spoiled stock earlier this month.
  • Security experts warn that internet-linked refrigeration systems using outdated firmware, such as Danfoss and Copeland xweb, increase vulnerability to cyberattacks with significant operational and financial risks.

Joint probe centers on military base outages

As first reported by Fortune, citing Signal and Silence, the August outages at more than half a dozen U.S. military commissaries are being examined as a possible hack, while the Pentagon has confirmed that the Defense Criminal Investigative Service is leading a joint investigation. In a statement to Fortune, the Pentagon said it does not comment on ongoing law enforcement investigations for security reasons.

The disruptions affected commissaries at Fort Irwin, California; Holloman Air Force Base, New Mexico; Naval Station Newport, Rhode Island; Little Rock Air Force Base, Arkansas; F.E. Warren Air Force Base, Wyoming; Robins Air Force Base, Georgia; and Fort Huachuca, Arizona. Commissaries sell subsidized goods to people living on military bases, typically at prices about 25% below those at civilian grocery stores.

Investigators are also working with French authorities after a separate wave of refrigeration failures hit supermarkets in France earlier this month. Cybersecurity specialists say the similarity in target type and operational impact is enough to justify suspicion, even though there is still no evidence that the U.S. and French cases are connected or that the commissary failures were definitively caused by a cyberattack.

Retail and defense systems face growing appliance threats

In France, hackers raised temperatures in refrigeration and freezer systems overnight to more than 122 degrees Fahrenheit, spoiling food and causing fires at hundreds of stores, including Carrefour, Monoprix and Intermarché locations. The Paris prosecutor's office described the incident as a large-scale attack, and French authorities later warned that vulnerabilities involved Danfoss AK-SM and AK-SC remote controllers, as well as Copeland xweb and Dixell xweb systems running outdated firmware accessible through the internet.

Security researchers say refrigeration systems are attractive targets because successful intrusions can quickly create direct and irreversible financial losses. Fortune cited estimates from Sud Ouest that two French supermarket operators, Intermarché and E.Leclerc, suffered combined stock damage of about 270,000 euros, roughly $300,000.

The broader backdrop is a rising volume of attacks on governments and companies, with connected devices expanding the number of possible entry points. Analysts say internet-linked appliances often prioritize operational features over security, leaving commercial chains and military supply networks exposed to disruptive attacks that can carry both economic and strategic consequences.

In our earlier article on the Q3 2026 cybersecurity funding surge, we noted that global security and privacy startups raised $6.8 billion as larger late-stage rounds lifted totals even while the number of deals fell. We also highlighted how investor focus clustered around AI-driven and identity security, alongside a pickup in big-ticket M&A—signaling that organizations are putting more capital behind tools meant to counter increasingly disruptive cyber threats.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.