UK Supermarkets Face Refrigeration Cyber Risk As Attacks Disrupt European Stores

British supermarkets face a refrigeration security risk highlighted by fresh attacks across Europe, with research identifying more than 800 internet-exposed refrigeration and building-management controllers in the UK.

The warning comes after suspected cyberattacks disrupted supermarket cooling systems in countries including Sweden, Belgium, Luxembourg and Ireland on Monday 2 November, forcing retailers to remove chilled and frozen food from sale.

The National Cyber Security Centre (NCSC) told The Grocer it was not aware of any UK supermarkets affected by the latest incidents. However, the publication separately reported refrigeration interference at several British meat processors, including one supplier whose equipment had reportedly been set to defrost every hour.

Research published by UK Cyber Defence in October provides evidence of potential exposure within Britain’s own cold chain.

The cybersecurity company said it had identified more than 800 refrigeration and building-management controllers whose management interfaces were accessible directly from the public internet. These were spread across premises including supermarkets, cold stores, distribution centres and plant rooms.

The figure represents controllers across different types of premises, rather than 800 confirmed vulnerable supermarkets. Internet accessibility alone also does not establish that a device has been compromised. Nevertheless, it creates an opportunity for attackers to target weak passwords or security flaws.

The NCSC has previously warned that organisations should not assume their operational technology — equipment that monitors or controls physical processes — is isolated from the internet.

Its August advisory reported increased targeting of such systems across multiple sectors, including in the UK, resulting in some real-world disruption. It warned that unintended exposure can arise through misconfigured systems, old connections and equipment that organisations have failed to track.

Across Europe, the consequences have already become visible.

In Ireland, refrigeration systems at 13 SuperValu stores were affected. Owner Musgrave removed chilled and frozen products from sale as a precaution. Associated Press reported that the incident had been resolved and restocking was under way by Monday afternoon.

Swedish retailers ICA and Coop also reported affected stores, while Carrefour said 15 Belgian outlets had experienced attacks.

The incidents follow October’s attacks on hundreds of French supermarkets. The Paris prosecutor’s office told Recorded Future News that approximately 700 victims had been identified in that earlier wave.

No group has claimed responsibility for either wave, and it remains unknown whether the same perpetrators were involved.

For UK retailers, the response extends beyond protecting payment systems and customer information. The NCSC recommends identifying operational equipment and its connections, removing direct internet exposure, replacing default passwords and securing remote access.

For fresh produce businesses, the implications are practical: compromised temperature controls could damage perishable stock, interrupt deliveries and reduce availability. The European incidents show how quickly a cyber incident can become a food waste and business continuity problem — making refrigeration security a priority throughout the supply chain.