Supermarket Freezers Hit by Cyber Attacks Raise Concerns

Retail stores across several European countries have experienced suspected cyber-attacks that disrupted fridges and freezers. The incidents have prompted wider discussions about the safety of internet-connected hardware, ranging from industrial equipment to domestic household devices. While smart appliances like washing machines and heating systems offer remote convenience, any online-connected tool theoretically remains vulnerable to malicious interference.

Major manufacturers generally implement robust security measures, yet historical flaws have occasionally emerged. In 2015, researchers exposed a vulnerability in a specific brand of smart fridge that allowed traffic interception, though no evidence suggests home appliances were involved in the recent European grocery store disruptions. Security experts emphasize that technology must evolve alongside connectivity to protect physical inventory.

Hackers Can Target Refrigeration Systems

Tom Hegel of SentinelOne noted that once malicious actors gain control of equipment, routine operational functions such as defrosting can be weaponized. Altering temperature settings risks destroying physical merchandise rather than merely disrupting computer networks. Furthermore, UK Cyber Defence researchers discovered over 800 refrigeration and building-control interfaces tied to British retailers that are accessible via the public internet, leaving them potentially exposed to software flaws or weak credentials.

Food retailers have previously faced supply chain disruptions from digital intrusions. In May 2025, ransomware attacks against UK supermarkets like M&S and the Co-op resulted in empty shelves for fresh goods. Industry leaders, including British Retail Consortium chief executive Helen Dickinson, noted that these incidents remain a primary concern, with businesses collaborating alongside the National Cyber Security Centre to strengthen defences and share intelligence.

Former NCSC chief executive Ciaran Martin stressed that technology companies must deliver safer products initially, while advising users to activate multi-factor authentication and keep software updated. Since April 2024, UK regulations have mandated minimum cyber security standards for certain consumer smart devices, covering passwords and updates. Meanwhile, the NCSC continues to monitor the supermarket incidents with international partners, though no domestic UK impact has been confirmed.

Connected retail equipment vulnerabilities pose real risks of physical stock destruction and supply chain disruption.

Why it matters

These cyber incidents highlight the growing physical risks associated with connected retail infrastructure and industrial hardware. The events affect major food retailers, supply chains, and consumers who rely on consistent access to fresh goods.