Hackers breach European supermarkets, exposing risks in smart technology

Supermarkets across Europe have experienced a suspected cyber-attack that has compromised their refrigeration systems, raising significant concerns about the security of internet-connected devices. The attack, which occurred in November, has highlighted vulnerabilities not only in industrial machinery but also in everyday appliances like fridges and washing machines.

The rise of smart devices, which can be controlled remotely, has made life more convenient, but it has also opened the door for potential cyber threats. While major manufacturers invest heavily in security measures, the reality is that any device connected to the internet can be targeted by hackers. Historical examples, such as a 2015 incident where researchers exploited a vulnerability in a Samsung smart fridge, underscore these risks. However, officials have stated there is no evidence that domestic appliances have been directly involved in the recent supermarket cyber-attacks.

Ciaran Martin, the former chief executive of the UK's National Cyber Security Centre (NCSC), emphasized the need for manufacturers to enhance the security of connected devices. He urged consumers to stay vigilant by updating their devices regularly and enabling multi-factor authentication. Since April 2024, UK law mandates that certain consumer smart devices adhere to minimum cybersecurity standards, which include rules about passwords and security updates. Despite these regulations, researchers from UK Cyber Defence have found over 800 refrigeration and building-control systems linked to British retailers that are accessible via the public internet, raising concerns about their exposure to cyber threats.

In response to these incidents, the British government has engaged in discussions with food retailers about enhancing cyber resilience. Helen Dickinson, chief executive of the British Retail Consortium, acknowledged that cyber incidents pose a significant challenge for retailers, who are collaborating with the NCSC to bolster their defenses. Past incidents, like the ransomware attacks on M&S and the Co-op in May 2025, which resulted in empty shelves across the UK, highlight the potential ripple effects of such cyber threats on the food supply chain. As the landscape of cyber threats evolves, it remains crucial for retailers to clarify their responsibilities regarding the security of their equipment and to implement robust protective measures.