SIFTR Insights

A freezer full of ruined stock. Orders you cannot fulfil. A business unable to open as normal.

That is what a cyber attack can look like.

On 2 November, supermarkets across Europe reported attacks on refrigeration systems, with some temperatures reportedly raised to 50°C. Businesses had to remove food from sale and discard spoiled stock.

The UK has already seen some impact. According to BBC reporting on 3 November, the National Cyber Security Centre, part of GCHQ, confirmed a small number of instances where vulnerable technology had been exploited here. It had worked overnight to alert potentially affected organisations.

The concern extends across the food supply chain, wherever businesses depend on vulnerable refrigeration systems.

How do you hack a fridge?

Commercial refrigeration can be controlled remotely, allowing engineers to check temperatures and change settings without visiting.

If those controls are poorly protected, an attacker could gain access too. France’s cyber security response team has advised businesses to secure remote connections, install available security updates and change default passwords.

The consequences can reach the shop floor: wasted food, lost income and interrupted trading.

Why UK businesses should pay attention

For a local butcher, restaurant or food manufacturer, losing refrigerated stock could mean losing thousands of pounds and days of trading.

The effects could also spread. If a producer or distributor cannot keep food safely chilled, the businesses waiting for those deliveries could face disruption too.

This does not mean widespread UK food shortages are happening. It does mean businesses should check the equipment and suppliers they rely on.

Start with three questions for your equipment supplier and IT provider:

• Who can access our equipment remotely, and how is that access protected?
• Is it still supported and receiving security updates?
• Would someone receive and respond to an alert overnight?

Agree what to do if something goes wrong, and coordinate changes with your supplier so essential monitoring keeps working.

The NCSC’s annual review, published on 3 November, reinforces the point: many successful attacks still exploit familiar weaknesses. Preparation and early action help reduce the damage.

If someone changed your equipment’s settings tonight, would you know before the damage was done?

Sources: BBC News and NCSC Annual Review 2026.