
Questions over the security of connected devices after cyber attack on European supermarkets
AI-generated summary
Fridges and large freezers hacked in cyber attack on European supermarkets. According to UK law from April 2024, companies making home smart devices will have to follow minimum cyber security standards. In May 2025, M&S and Co-op were also targeted by hackers.
Recently, fridges and large freezers were hacked in a suspicious cyber attack on supermarkets across Europe.
Internet and Wi-Fi connected appliances also include refrigerators, washing machines and central heating systems.
When even simple electronic devices are not protected from cyber attacks, it exposes the vulnerabilities of the entire industry.
Devices that are connected to the internet are easy to control remotely. Many times hackers take advantage of this.
But this does not mean that hackers can control every device. Home appliance brands constantly claim that their technology is safe.
Such attacks have already happened on some devices. A research has claimed that in 2015, a Samsung smart fridge came under the control of hackers.
But there is no evidence that the cyber attack on supermarkets has any direct connection with home appliances.
Ciaran Martin, former chief executive of Britain's National Cyber Security Center (NCSC), told the BBC: "Manufacturers need to do more to make connected devices secure. We should expect more from big tech companies to provide us with more secure devices and products than ever before."
He said, "General consumers should keep their devices updated. Where possible, two-factor authentication should also be turned on. It only takes a few seconds to update it."
According to British law, from April 2024, companies manufacturing home smart devices will have to follow minimum cyber security standards. These also include requirements related to passwords and security updates.
The NCSC said it is working with international partners and the industry to understand these supermarket incidents, but is not aware of any impact on the UK.
Nevertheless, UK cyber defense researchers have identified more than 800 refrigeration and building-control interface or smart automation systems connected to UK retailers that can be controlled via the external internet.
This does not mean that they can be hacked. But they can become targets of hackers who take advantage of weak passwords or software vulnerabilities.
Questions on cars, power plants and water supply also
However, it was only after earlier attacks on supermarkets that the government asked major food retailers to strengthen their cyber security.
Helen Dickinson, chief executive of the British Retail Consortium, told BBC News: "Cyber incidents like this are of great concern to retailers."
According to him, businesses are working with NCSC to share information and strengthen their security.
However, this is not the first time this has happened. Food supply has been affected in the past due to hacking and concern has been raised about this.
In May 2025, Britain's supermarket 'M&S' and retail company 'Co-op' were targeted by hackers. At that time, retailers faced difficulty in delivering fresh goods. After the cyber attack, customers complained about goods not being available in the store throughout the day.
Tom Hagel, a researcher at cyber security firm SentinelOne, told BBC News that food retailers should be more vigilant when it comes to cyber security.
He said, "Retailers need to answer the question of who is responsible for the security of these devices, not just who repairs them. Internet connectivity can make everyday technology easier to use, but it also requires security. It is not just computers that are affected by hacker attacks. Changing one setting can also spoil the contents of the freezer."
Internet or Wi-Fi technology is used not only at home but also outside. With this technology, industrial machines and vehicles are controlled remotely.
Cybersecurity expert Ken Munro recounted a 2015 demonstration. In that, researchers had remotely hacked a jeep through its internet-connected entertainment system. After this the safety of the vehicle was improved.
"Fortunately, the auto industry is taking notice and has fixed the problem," Munroe said.
Mobile connections are also used extensively for monitoring power houses and water plants. This allows engineers to control the system remotely.
Munro said Britain's utility companies are generally good at securing these connections, but security standards vary around the world.
His biggest concern was about small and underfunded utility companies. They are probably still dependent on old systems and technology.
"Without proper security, any factory or device connected to the Internet can face similar threats, from car manufacturers to power plants and traffic systems," said Olivier Delloy, cybersecurity expert at Zscaler.
AI outlook — possibilities, not facts
UK retailers to strengthen their cyber security.
Likely · Within weeks
Smart device manufacturers will improve security.
Possible · Within months
India's cybersecurity agency CERT-In has released AI Security Auditing Guidelines dated Nov 4, requiring limits on AI agent access to business systems, records of actions, emergency interruption mechanisms, and human approval gates for consequential actions, while addressing prompt injection and data leak risks.
India's telecom regulator, Trai, has recommended a new 'satellite communication network' (SCN) authorization under the Telecom Act, 2023. The framework allows entities to provide satellite capacity to telcos, with Eutelsat OneWeb, Reliance Jio, and Starlink awaiting entry.
A suspected cyberattack targeted refrigeration systems at major European supermarket chains, including Delhaize, Carrefour, ICA, and SuperValu. Attackers remotely raised temperatures, causing significant food spoilage across Belgium, Sweden, Ireland, and Estonia.
Microsoft CEO Satya Nadella stated his views on AI alignment have shifted, acknowledging it as a complex challenge rather than an automatic outcome. He also addressed the global IT crisis caused by recent critical PHP vulnerabilities.
Nvidia CEO Jensen Huang praised global immigration as a vital US strength on the BG2 podcast, emphasizing that attracting international talent drives American innovation and technology creation, while acknowledging the need for lawful rules.
Starting November 1, Indian telecom operators will roll out Calling Name Presentation (CNAP) to display caller names on recipient phone screens for both saved and unsaved numbers, per Department of Telecommunications directives.