UK also affected by cyber-attack which hit European fridges

The National Cyber Security Centre (NCSC) has confirmed it is aware of a few cases within the UK where vulnerable refrigeration technology has been exploited by hackers. These incidents come in the wake of cyberattacks targeting refrigeration systems in supermarkets and food suppliers throughout Europe. The disruptions notably affected several countries, including Ireland, Sweden, Estonia, and Belgium, where supermarket fridges were deliberately raised in temperature, causing concerns over food safety and loss.

Dr. Richard Horne, the chief executive of the NCSC, spoke on BBC Radio Four’s Today programme about the centre’s response to the situation. He revealed that the NCSC had been working tirelessly overnight to notify organisations potentially impacted by these breaches. Although only “handfuls” of UK bodies had been alerted so far, there were already “a couple of impacts” confirmed. These events follow a similar series of cyberattacks in France during early October, which targeted hundreds of retail stores and food suppliers, resulting in millions of euros worth of spoiled perishable goods.

The attacks exploited known weaknesses in the software systems used to remotely control cold storage units. Cybersecurity researchers had identified these vulnerabilities months before the hacks occurred. According to Dr. Horne, while it remains “too early to say” who is responsible for the recent attacks, the incidents highlight the pressing need for companies to ensure their technological infrastructure is both secure and current. He emphasized that many organisations continue to operate outdated systems that should have been replaced or isolated from internet access, creating easy targets for cybercriminals.

Dr. Horne also warned about the increasing risks posed by artificial intelligence tools that could accelerate the identification and exploitation of such weaknesses by malicious actors. His message was clear: it is crucial for businesses and other organisations to reevaluate their reliance on existing technology and invest in necessary upgrades. Although the NCSC can provide guidance and intervene when possible, the ultimate responsibility rests with the entities themselves. As Dr. Horne remarked, “It’s your business. It’s your charity. It’s your life. You need to make the choice and choose wisely.”