A joint notice from CISA, the FBI, HHS, USDA and the Department of Transportation on Nov. 5, 2026, urged stronger cybersecurity for industrial refrigeration and cold-chain monitoring. Separately, an incident at a refrigeration-equipment provider on Nov. 2 affected cold-room monitoring and control installations at three sites of France’s Établissement français du sang (EFS).
For cold-chain safety, network protections are one layer; independent alarms, hard-wired cutoffs and trained manual control add separate safeguards.
What happened at EFS
EFS said the equipment provider was affected and that EFS itself was not directly targeted. Anomalies raised temperature and defrost settings to very high levels at the affected installations. EFS’s statement on the incident says its monitoring and alarms detected the changes. Depending on the situation, equipment was controlled or neutralized, and products were moved to other installations as a precaution.
EFS reported no health impact or blood-product losses and said collection and distribution continued.
Why refrigeration controls matter to healthcare
Operational technology (OT) is equipment that monitors or controls physical processes, such as refrigeration. When temperature controls affect storage conditions, a cybersecurity problem can put temperature-sensitive inventory at risk.
The U.S. agencies warned of ongoing global activity targeting vulnerabilities and weaknesses in unpatched or internet-accessible temperature and commercial refrigeration controllers. They identified Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems as sectors that widely use these systems. The agencies said successful attacks could change temperatures and lead to fire hazards, inventory loss or shorter equipment service life.
What the joint U.S. fact sheet recommends
The Nov. 5 notice from CISA, the FBI, HHS, USDA and the Department of Transportation recommends that organizations:
- Remove refrigeration control devices or systems from the internet.
- Change default passwords and strengthen password security.
- Apply patches and updates.
- Identify, retire and replace legacy devices that vendors no longer support.
The recommendations address connected and unsupported equipment across several sectors, including healthcare. CBS News also covered the broader U.S. warning about refrigeration used in healthcare and agriculture.
Healthcare safeguards reported by NPR
NPR reported that Health ISAC’s healthcare-sector bulletin urged organizations to separate refrigeration controls from hospital IT and guest networks, keep offline system backups, and train staff to take physical manual control during emergencies. NPR also attributed recommendations for independent thermal alarms and hard-wired cutoffs that software overrides cannot bypass to Health ISAC chief security officer Errol Weiss.
