Supermarkets in many places in Europe have recently suffered a suspected cyber attack, affecting their refrigerators and freezers and raising concerns about vulnerabilities in Internet connection hardware. These hardware range from industrial machinery to everyday household appliances.
Internet-connected smart devices can include refrigerators, central heating systems, and even washing machines.
While such devices are therefore easier to control remotely, in theory, any device connected to a network could potentially be exploited by malicious actors.
However, that doesn't mean it's easy for hackers to gain control, and large brands often invest significant resources into ensuring the security of their products.
Vulnerabilities have been discovered in some devices in the past. In 2015, researchers demonstrated how a vulnerability in Samsung smart refrigerators allowed them to intercept Internet traffic.
However, there is currently no evidence that household appliances were targeted in the November cyberattack on supermarkets.
Ciaran Martin, former chief executive of the UK's National Cyber Security Center (NCSC), said manufacturers need to do more to improve the security of connected devices.
"We need to demand more from big tech companies to provide us with more secure devices and products from the start," he said.
He advises consumers to keep their devices updated and enable multi-factor authentication where feasible.
"I know it's a hassle, but it only takes a few seconds," he said.
From April 2024, British law will require some consumer smart device manufacturers to meet minimum cybersecurity standards, including requirements for password management and security updates.
The UK's National Cyber Security Center said it is working with international partners and industry to understand the circumstances of these supermarket incidents, but has not yet found any impact on the UK.
However, researchers from UK Cyber Defense have identified more than 800 cooling and building control system interfaces related to UK retailers that are accessible via the public internet.
This doesn't necessarily mean they can be hacked, but it could leave them open to attackers who exploit weak passwords or software vulnerabilities.
The government has held talks with top executives from the food retail industry to discuss cyber resilience following an earlier cyber attack on supermarkets.
Helen Dickinson, chief executive of the British Retail Consortium, said that cyber security incidents are a major concern for retailers, and companies are working with the National Cyber Security Center to share intelligence and strengthen defense capabilities.
This is not the first time a hacker attack has raised concerns about the impact on the food supply.
In May 2025, when British supermarkets Marks & Spencer (M&S) and Co-op Group (Co-op) were attacked by ransomware hackers, the two retailers once struggled to replenish some store shelves with fresh goods.
In the days after the attack, customers across the UK complained of empty shelves.
Tom Hegel, a researcher at cybersecurity firm SentinelOne, said retailers must be more clear about who is responsible.
"The question retailers need to answer is who is responsible for the safety of these devices, not just who is responsible for servicing them," he said.
Internet connectivity can make everyday technology products more convenient, but security measures must keep pace, he said.
"Once an attacker is able to manipulate these control systems, normal functions like defrosting can become a disruptive tool," he said.
"Changing a setting could destroy the physical inventory, not just interfere with the computer system," he said.
Could there be vulnerabilities in cars, power plants and water systems?
Outside the home, connected technology is also being used to remotely manage industrial machinery and vehicles.
Cybersecurity expert Ken Munro pointed to a 2015 demonstration in which researchers remotely hacked into a Jeep's Internet-connected entertainment system, prompting the industry to tighten vehicle security measures.
"Fortunately, the auto industry is aware of this problem and has fixed it," he said.
Mobile connectivity is also widely used to monitor equipment in power plants and water supply networks, allowing engineers to manage systems remotely.
Munro said UK utilities generally did a good job of protecting these connections, but standards were not consistent around the world.
