If hackers can take control of a supermarket freezer, how vulnerable is other tech?

ByShiona McCallum Senior tech reporter.

Key points

• Cyber security expert Ken Munro pointed to a 2015 demonstration in which researchers remotely hacked a Jeep through its internet-connected entertainment system, prompting improvements in vehicle security.
• Nevertheless, researchers from UK Cyber Defence have identified more than 800 refrigeration and building-control interfaces associated with British retailers that can be accessed over the public internet.
• Ciaran Martin, former chief executive of the UK's National Cyber Security Centre (NCSC) notes manufacturers needed to do more to produce connected devices secure.
• Since April 2024, UK law has required manufacturers of certain consumer smart devices to meet minimum cyber security standards, including requirements around passwords and security updates.
• When UK supermarkets M&S and the Co-op were targeted by ransomware hackers in May 2025, the retailers struggled to stock some shop shelves with fresh deliveries.

Supermarkets throughout Europe have been hit by a suspected cyber-attack affecting their fridges and freezers, and raising concern concerning the vulnerabilities of internet-connected hardware from industrial machinery to humble domestic appliances.

Smart devices which are connected to the internet can include fridges, central heating, and even washing machines.

And while that makes them easier to control remotely, in theory, any device which goes online can potentially be exploited by malicious actors.

Nevertheless, that doesn't mean hackers can easily take control of it, and sizeable brands generally go to great lengths to create sure their tech is secure.

Exploits have been discovered before in some devices. In 2015, researchers demonstrated how a vulnerability in a Samsung smart fridge could allow them to intercept internet traffic.

But there's no evidence domestic appliances are being targeted in the cyber-attacks which targeted supermarkets in November.

"There's a lot more that we need to demand of big tech to give us safer devices and products in the first place, " he remarked.

He advised consumers to keep devices updated and enable multi-factor authentication wherever feasible.

"I know it's a pain, but it only takes a few seconds, " he remarked.

For context, the NCSC remarked it was working with international partners and industry to understand the supermarket incidents, but it was unaware of any impact on the UK.

That doesn't necessarily mean they can be hacked, but it could leave them exposed to attackers exploiting subdued passwords or software vulnerabilities.

After earlier attacks on supermarkets, the administration has already held negotiations with senior food retailers regarding cyber resilience.

Helen Dickinson, chief executive of the British Retail Consortium, has remarked cyber incidents are a major concern for retailers, with businesses working alongside the NCSC to share intelligence and strengthen their defences.

It would not be the first time that hacks have raised concern regarding impact on food supply.

Customers throughout the UK complained of empty shelves in the days after the attack.

Tom Hegel, a researcher at cyber-security firm SentinelOne, remarked retailers must be clearer concerning responsibility.

"The question retailers need to answer is who owns the security of that equipment, not just who repairs it, " he remarked.

He remarked internet connectivity can produce everyday technology more convenient, but security needed to keep pace.

"Once an attacker can operate those controls, legitimate functions such as defrosting become tools for disruption, " he remarked.

"Changing a setting can destroy physical stock, not just interrupt a computer system." Could cars, power plants and water supplies be vulnerable?

Outside of the home, connected tech is applied to remotely manage industrial machinery and vehicles.

"Fortunately, the vehicle industry woke up to this and fixed the problem, " he remarked.

Mobile connections are additionally widely employed to monitor equipment in power plants and water networks, allowing engineers to manage systems remotely.

Munro remarked UK utilities were generally good at securing these connections, but standards varied worldwide.

His biggest concern was smaller, poorly funded utility firms which may still be relying on older, vulnerable equipment.

Without proper protections, "any factory or equipment" connected to the internet – ranging from carmakers to electricity or transport infrastructure – could face similar risks, remarked Olivier Daloy, a cybersecurity expert at Zscaler. Shop freezers in seven European countries hit by cyber-attack. Binance users withdraw $3.6bn after largest-ever crypto hack.

In short, if hackers can take control of a supermarket freezer, how vulnerable is is the central thread here, and readers can expect follow-up reporting as the picture becomes clearer.