Pentagon Probes Freezer Cyberattacks on US Military Bases

Warm freezers and ruined rations across six installations

What initially looked like isolated mechanical headaches on military bases across the United States has escalated into a federal national security inquiry. Staff arriving at base commissaries found industrial freezers switched into defrost cycles overnight, with temperatures driven up intentionally while facilities were closed.

Fort Huachuca bluntly addressed the scale of the waste on social media, posting, "Trust us when we say it was 'spoiled.'" According to reporting from Reuters, the disruptions affected facilities across the country, with confirmed incidents at Fort Irwin, F.E. Warren, Naval Station Newport, Columbus, Travis, and Fort Huachuca.

The Department of Defense confirmed that its criminal investigative arm, the Defense Criminal Investigative Service (DCIS), is leading a joint inquiry alongside the Army Criminal Investigation Division's Cyber Field Office and units from US Cyber Command.

The French connection and insecure cooling hardware

US investigators are actively coordinating with law enforcement in France, where commercial supermarket chains experienced an almost identical rash of targeted cooling failures in October. In those cases, threat actors altered thermostat settings across centralized refrigeration controllers without raising immediate alarms.

Industrial cooling hardware manufacturer Danfoss clarified following the European incidents that attackers took advantage of obsolete devices and unpatched firmware. Modern facilities rely on connected equipment for remote monitoring, but like vulnerabilities where corporate CCTV software compromises networks, these internet-facing building systems often lack routine endpoint protections.

When facility operators fail to isolate operational hardware on segregated networks, commercial environmental controls become vulnerable soft targets that allow malicious actors to disrupt critical daily logistics without ever breaching classified defense servers.

What it means for military families and bases

Commissary operations across the affected installations have resumed normal service, though supply replenishments took several days following the August spoilage. Defense officials have not released a financial estimate for the wasted inventory.

The investigation remains active under DCIS oversight, with military commands reviewing network permissions on all internet-facing commercial appliances running across domestic installations.