The National Cyber Security Centre (NCSC) confirmed it was aware of “a couple of instances” in which vulnerable refrigeration technology had been exploited in Britain.

The confirmation follows attacks affecting supermarkets in Ireland, Sweden, Belgium and several other European countries.

The incidents come just weeks after hackers remotely raised refrigeration temperatures at hundreds of French supermarkets, as reported by Better Retailing, destroying chilled and frozen stock worth millions of euros.

Supermarkets across Europe targeted

In Ireland, supermarket chain SuperValu confirmed refrigeration systems at 13 of its 223 stores had been affected, forcing chilled and frozen products to be removed from sale.

Swedish retailers ICA and Co-op also reported incidents, with one ICA store claiming its fridges and freezers had reached temperatures of 50°C.

Stores operated by Ahold Delhaize, Carrefour and Spar were among those affected in Belgium, while incidents were also reported in Luxembourg, the Netherlands and Estonia.

One Belgian butcher reported losing around €15,000 worth of meat after refrigeration temperatures rose to 18°C.

The British Association of Independent Meat Suppliers (AIMS) told the BBC that some of its members had been affected by the latest attacks, although none had lost any meat.

Tony Goodger, the association’s head of communications, said the incidents were a reminder that businesses throughout the food supply chain could become targets.

Fresh warning for UK over cyber attacks

The latest cyber attacks coincide with a fresh warning from the NCSC, part of intelligence agency GCHQ, about the growing threat posed by artificial intelligence.

In its State of the Cyber Nation report, published on 3 November, the agency warned that AI-powered malware was highly likely to be used in a ransomware attack against Britain’s critical national infrastructure by 2028.

The report also warned that criminals and other hostile actors were increasingly likely to use AI to identify weaknesses, exploit vulnerabilities and carry out attacks more efficiently.

Speaking to BBC Radio 4’s Today programme following the refrigeration attacks, NCSC chief executive Dr Richard Horne said the agency had worked overnight to alert potentially affected organisations in the UK.

He warned that many businesses were continuing to use technology beyond its intended lifespan, failing to install updates or leaving equipment unnecessarily connected to the internet.

Horne said it was still “too early to say” who was responsible for the cyber attacks.

In a separate speech accompanying the NCSC’s new report, he warned: “For decades, we have collectively got away with doing tech on the cheap.”

He urged organisations to invest in modernising their technology, reduce unnecessary internet connections and make cyber security a fundamental part of their operations.

Hundreds of UK refrigeration systems exposed

Better Retailing previously revealed that at least 800 refrigeration and building-control systems in Britain were exposed to potential cyber attacks through the internet.

Cyber security firm UK Cyber Defence made the discovery after investigating whether vulnerabilities similar to those exploited during the earlier French attacks existed in the UK.

Peter Bassill, the company’s head of threat disruption, said he had not established whether any of the exposed systems belonged to independent retailers.

However, he warned that convenience stores could also be vulnerable through connected equipment including CCTV cameras, burglar alarms, lighting, heating and air conditioning systems.

Some of these systems could be accessed over the public internet, rather than being restricted to authorised users.

“They’re doors on a street that anyone can go and open because either the lock is broken or the lock isn’t even there in the first place,” he told Better Retailing.

Bassill said many businesses relied on third-party suppliers to install and maintain connected equipment, making it important for retailers to understand who was responsible for keeping systems secure.

“If you’ve got organisations within your business that have an internet connection, or they have a device connected to the internet, you need to be asking them: ‘How has this been updated? When was it last updated? Is it secure?’” he said.

How can retailers protect themselves from cyber attacks?

Paul Jordon, managing director of specialist refrigeration company The Jordon Group, previously told Better Retailing that smaller independent retailers were less likely to be targeted directly, although stores with remotely controlled systems faced greater risks.

“My advice for retailers who are worried about their chillers being compromised is simple: ensure you have the latest firmware and security updates installed, and make sure you’re not using legacy equipment,” he said.

Meanwhile, James Griffiths, founder of cyber security consultancy UtopianKnight, warned that independent retailers could also be affected indirectly if wholesalers, payment providers or other essential suppliers were attacked.

He urged businesses to consider how they would continue trading if a critical system or supplier became unavailable.

“Some of it you’re not going to be able to protect against, but it’s understanding what you would do in that scenario,” he said. “I think a lot of people, especially in this sector, are probably underprepared for what would happen.”

Read more Industry news

Source link