Supermarket cyberattacks raise alarms over vulnerabilities in connected hardware
A series of cyberattacks targeting refrigeration systems in European supermarkets has highlighted the security risks inherent in internet-connected infrastructure.
Recent cyberattacks targeting supermarket refrigeration and freezer systems across Europe have intensified scrutiny regarding the security of internet-connected hardware. While domestic appliances remain largely outside the scope of current investigations, experts warn that the ubiquity of connected devices across industrial and consumer sectors creates significant exposure to malicious actors.
Ciaran Martin, former head of the UK's National Cyber Security Centre (NCSC), argued that manufacturers must be held to higher standards for device security. Since April 2024, UK regulations have mandated that manufacturers of consumer smart devices meet minimum security requirements, including robust password protocols and software update support.
Research from UK Cyber Defence indicates that over 800 refrigeration and building-control interfaces associated with British retailers are accessible via the public internet. Security researcher Tom Hegel noted that when attackers gain control over these systems, standard functions like defrosting can be weaponized to cause physical disruption, such as the destruction of perishable stock.
Beyond retail, the focus has shifted toward critical utilities. Cybersecurity experts warn that while large-scale operators often maintain adequate defenses, smaller utility companies relying on legacy equipment remain particularly vulnerable. Industry observers suggest that clear ownership of security protocols is essential to prevent future infrastructure failures.