The agencies say successful attacks can change temperatures (shortening equipment life, creating fire hazards, spoiling inventory or indirectly harming consumers) or cause a loss of view of current temperatures. Healthcare, chemical, food and agriculture, and transportation (including refrigerated transport) widely use these systems.

What they ask for now: take controller panels off the internet, put OT on its own VLAN, change default passwords and use phishing-resistant MFA where possible, patch firmware and retire end-of-life units, allowlist the devices and IPs allowed to make changes, keep offline backups, log and review activity, and set safe setpoint limits with alerts on deviations. The fact sheet does not name a threat actor, and no one has claimed the European attacks.