By Karim Hammam
Supermarkets across Europe have been hit by a suspected cyber-attack affecting their fridges and freezers, raising concern about the vulnerabilities of internet-connected hardware ranging from industrial machinery to domestic appliances.
Smart Devices at Risk
Smart devices connected to the internet include fridges, central heating systems, and washing machines. While remote control adds convenience, any online device can potentially be exploited by malicious actors, though major brands generally invest heavily in security.
Expert Warnings on Manufacturer Responsibility
Ciaran Martin, former chief executive of the UK's National Cyber Security Centre (NCSC), said manufacturers must do more to secure connected devices. He urged consumers to keep devices updated and enable multi-factor authentication. Since April 2024, UK law has required manufacturers of certain consumer smart devices to meet minimum cyber security standards. The NCSC is working with international partners to understand the supermarket incidents but is unaware of any impact on the UK.
Retailers Strengthen Defences
Researchers from UK Cyber Defence identified more than 800 refrigeration and building-control interfaces linked to British retailers accessible over the public internet, potentially exposing them to weak passwords or software flaws. The government has held talks with senior food retailers on cyber resilience following earlier attacks. Helen Dickinson, chief executive of the British Retail Consortium, said cyber incidents are a major concern, with businesses sharing intelligence with the NCSC. In May 2025, ransomware attacks on M&S and the Co-op disrupted fresh deliveries, leaving shelves empty.
Industrial Systems Also Vulnerable
Beyond homes, connected technology manages industrial machinery and vehicles. Cyber security expert Ken Munro cited a 2015 demonstration where researchers remotely hacked a Jeep via its entertainment system, prompting industry improvements. Mobile connections monitor equipment in power plants and water networks; UK utilities generally secure these well, but standards vary globally. Olivier Daloy of Zscaler warned that without proper protections, any internet-connected factory or equipment — from carmakers to electricity and transport infrastructure — could face similar risks.
