Refrigeration HMI exposure: what it means for remote access governance

TL;DR: Internet-exposed refrigeration control systems can be manipulated through legitimate supervisory functions, creating physical and financial harm without destructive malware, according to Forescout, while tracking 12,976 exposed services across 6,017 public IPs in 99 countries and territories. The security problem is not just exposure, but weak ownership of remote maintenance, stale contractor access, and unaudited changes to setpoints and defrost schedules.

Editorial analysis by NHI Mgmt Group, based on content published by Forescout: “Cold Chain, Open Control: Exposed Refrigeration Systems Reveal Global Risk”.

By the numbers:

• The French incidents were reported across more than 700 supermarkets in the country.
• Since January 2026, tracking identified over 20 claimed attacks against refrigeration systems.
• One vendor bulletin described attacks in 2022 that affected 16 Russian supermarkets and 40 Israeli stores.

Key questions

Q: What breaks when remote maintenance on OT systems is exposed without strong identity controls?

A: The boundary between legitimate administration and hostile manipulation collapses.

Q: Why do contractor credentials create outsized risk in remotely managed industrial systems?

A: Because contractors often have broad, repeated access across multiple sites, and those accounts can persist longer than the business relationship that justified them.

Q: What are the signs that a remote operational control system is being abused?

A: Look for access sessions that coincide with unusual combinations of parameter changes, repeated configuration updates in a short period, changes outside normal maintenance windows, and actions that do not match expected site behaviour.

Practitioner guidance

• Remove direct public exposure Take refrigeration management interfaces off the public internet and restore remote maintenance through a secure remote access gateway with explicit approval boundaries.
• Eliminate shared contractor credentials Replace shared or stale maintainer accounts with named identities, MFA, least privilege, and session logging for every remote maintenance path.
• Map the full control path Inventory public endpoints, routers, VPNs or gateways, supervisory platforms, downstream controllers, sites, contractors, and accountable owners.

Bottom line: The central risk is not malware but the misuse of valid supervisory functions on publicly reachable refrigeration systems.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →