Hackers Target Supermarket Fridges Across Europe
Britain’s cybersecurity chiefs are keeping a close eye on a worrying series of attacks targeting something most shoppers would never think of as a cyber risk: supermarket fridges and freezers.
In recent incidents across several European countries, hackers remotely accessed in-store refrigeration systems and, in some cases, pushed temperatures as high as 55°C. The result was millions of euros worth of spoiled food and growing concerns about how well connected supermarket equipment is protected from cyber attacks.
The UK’s National Cyber Security Centre (NCSC) says it is working with international partners and businesses to understand exactly what happened.
“The NCSC is working with its international partners and industry to fully understand details of an incident.”
There is currently no indication that UK supermarkets have been targeted in the latest attacks. However, the incidents are likely to attract attention in Britain, particularly after a series of cyber attacks against major UK retailers.
A growing threat to the food supply chain
The latest attacks are particularly concerning because they go beyond stealing customer information or disrupting websites. By accessing refrigeration systems, attackers were able to interfere directly with the equipment responsible for keeping food safe.
EU agriculture and food commissioner Christophe Hansen described the incident as a “deliberate attempt to disrupt our food supply chain.”
SuperValu, Ireland’s third-largest supermarket chain, was among those affected. The company said refrigeration systems in 13 of its 223 stores were impacted on Monday.
Fortunately, the retailer later confirmed that the problems had been resolved and that stores were beginning to replenish their chilled and frozen products.
The attack was not limited to Ireland. Dozens of supermarkets across seven European countries were reportedly affected.
Around 40 Delhaize stores in Belgium and Luxembourg were hit, while smaller numbers of shops in Sweden, the Netherlands, Estonia and Finland also experienced problems.
At this stage, no information has been confirmed about who was behind the attacks.
How did hackers get into supermarket fridges?
The problem highlights an often-overlooked side of modern supermarket technology.
Most supermarkets use internet-connected refrigeration systems. This lets technicians and maintenance teams monitor equipment, identify faults, and make adjustments remotely without physically visiting every store.
That convenience, however, can create another potential entry point for cyber criminals.
Stephan Moelans, head of Sabcobel, the company that operates Delhaize’s refrigeration systems, said attackers targeted the defrost mode on freezers. In some cases, he suggested, insecure internet connections may have played a role.
The basic solution is straightforward: ensure refrigeration systems are managed through properly secured internet connections.
But the incident shows how even seemingly ordinary equipment can become part of a company’s cyber security landscape once it’s connected to the internet.
Not the first time supermarket refrigeration has been attacked
The latest incident is particularly worrying because it comes just weeks after another attack in France.
In that case, attackers reportedly gained remote control of refrigeration systems in hundreds of supermarkets and independent stores, causing temperatures to rise and putting chilled and frozen food at risk.
The repeated attacks are prompting questions about whether retailers have done enough to secure connected equipment.
For supermarkets, the risks are potentially significant. A compromised website might prevent customers from placing online orders, but a compromised refrigeration system can physically damage stock and disrupt the supply of essential food.
UK retailers are already facing cyber pressure.
The developments also come at a difficult time for the UK retail industry, which has faced several high-profile cyber attacks.
Marks & Spencer was targeted last year, forcing the retailer to suspend online orders and disrupting its stores.
Online fashion retailer ASOS has also been among companies affected by the recent wave of cyber attacks targeting retailers.
The UK government is now working with food industry representatives to strengthen preparedness and encourage businesses to remain vigilant.
While there is currently no evidence that British supermarket refrigeration systems are being targeted in the same way, the European attacks remind us that cyber security is no longer just about protecting computers, websites and customer databases.
Anything connected to the internet, from a payment system to a supermarket freezer, can become a target.
And as more of the infrastructure behind our food supply becomes connected and remotely managed, protecting those systems is becoming increasingly important.