Supermarket Freezer Hacks Highlight Risks for Connected Devices
Recent attacks on European supermarket refrigeration have raised questions about the security of internet‑connected hardware.
What happened?
Supermarkets across Europe experienced a suspected cyber‑attack that affected their fridges and freezers in November.
Why it matters
These incidents have sparked debate about the security of internet‑connected hardware, which can include anything from industrial machinery to domestic appliances such as fridges, central heating and washing machines.
Expert perspective
Ciaran Martin, former chief executive of the UK’s National Cyber Security Centre (NCSC), said manufacturers need to do more to make connected devices secure. He stated, “There’s a lot more that we need to demand of big tech to give us safer devices and products in the first place.”
Martin also advised consumers to keep devices updated and to enable multi‑factor authentication wherever possible, adding, “I know it’s a pain, but it only takes a few seconds.”
Regulatory backdrop
Since April 2024, UK law has required manufacturers of certain consumer smart devices to meet minimum cyber security standards, covering passwords and security updates.
Current investigations
The NCSC is working with international partners and industry to understand the supermarket incidents, but it has not reported any impact on the UK.
Potential exposure
Researchers from UK Cyber Defence identified more than 800 refrigeration and building‑control interfaces linked to British retailers that are accessible over the public internet. While this does not prove they can be hacked, it suggests they could be vulnerable to weak passwords or software flaws.
Government response
The government has already held talks with senior food retailers about cyber resilience following earlier attacks on supermarkets.
Key points
Supermarket refrigeration systems were the target of a suspected cyber‑attack in November.
Experts call for stronger security measures from manufacturers and better consumer practices.
Over 800 UK retail refrigeration interfaces are publicly reachable, highlighting possible exposure.
