Iranian Hacking Group Targets Global Industrial Refrigeration Systems

The Cyber Isnaad Front, an Iranian military hacking group, executed a global campaign of cyberattacks targeting industrial refrigeration systems. The operation began in Israel in early 2026, where the group targeted kosher grocery stores and a large food production plant. The attackers utilized artificial intelligence to rapidly compromise system configurations and destroy compressors, leading to widespread equipment destruction and food spoilage.

The campaign expanded globally throughout the year. In August, refrigeration disruptions hit U.S. military commissaries at bases including Fort Irwin and Fort Huachuca. While the Pentagon has not officially attributed these outages to hackers, investigators are treating them as cyberattacks with evidence pointing toward Iran. In October, the attacks hit hundreds of French supermarkets, including Carrefour and Intermarché, before spreading in November to stores across Sweden, Estonia, Ireland, Luxembourg, the Netherlands, and Belgium.

Forensic investigations by firms such as Claroty and Profero identified vulnerable or obsolete Danfoss refrigeration controllers as the primary entry vectors. Experts warn that the campaign exposes critical security gaps in aging operational technology connected to the internet.