If hackers can take control of a supermarket freezer, how vulnerable is other tech?
Dozens of shops across European countries have been hit by a cyber-attack affecting their fridges.
If hackers can seize control of a supermarket freezer, how exposed is other technology?
Supermarkets across Europe have been struck by a suspected cyber-attack that affected their fridges and freezers, prompting worries about the weaknesses of internet-connected hardware ranging from industrial machinery to ordinary household appliances.
Smart devices linked to the internet can include fridges, central heating systems and even washing machines.
And although that can make them easier to manage remotely, in theory any device that goes online could be targeted by malicious actors.
That said, it does not mean hackers can readily take control of them, and major brands usually go to considerable lengths to ensure their technology is secure.
Vulnerabilities have been discovered before in some devices. In 2015, researchers showed how a flaw in a Samsung smart fridge could let them intercept internet traffic.
But there is no evidence that domestic appliances are being targeted in the cyber-attacks that hit supermarkets in November.
Ciaran Martin, the former chief executive of the UK's National Cyber Security Centre (NCSC), said manufacturers needed to do more to secure connected devices.
"There's a lot more that we need to demand of big tech to give us safer devices and products in the first place," he said.
He advised consumers to keep devices updated and turn on multi-factor authentication wherever possible.
"I know it's a pain, but it only takes a few seconds," he said.
Since April 2024, UK law has required manufacturers of certain consumer smart devices to meet minimum cyber security standards, including rules on passwords and security updates.
The NCSC said it was working with international partners and industry to understand the supermarket incidents, but it was not aware of any impact on the UK.
However, researchers from UK Cyber Defence have identified more than 800 refrigeration and building-control interfaces linked to British retailers that can be accessed over the public internet.
That does not necessarily mean they can be hacked, but it could leave them open to attackers exploiting weak passwords or software vulnerabilities.
The government has already held discussions with senior food retailers about cyber resilience, following earlier attacks on supermarkets.
Helen Dickinson, chief executive of the British Retail Consortium, has said cyber incidents are a major concern for retailers, with businesses working with the NCSC to share intelligence and strengthen their defences.
It would not be the first time hacks have raised concerns about the impact on food supply.
When UK supermarkets M&S and the Co-op were targeted by ransomware hackers in May 2025, the retailers struggled to keep some shop shelves stocked with fresh deliveries.
Customers across the UK complained about empty shelves in the days after the attack.
Tom Hegel, a researcher at cyber-security firm SentinelOne, said retailers need to be clearer about responsibility.
"The question retailers need to answer is who owns the security of that equipment, not just who repairs it," he said.
He said internet connectivity can make everyday technology more convenient, but security must keep up.
"Once an attacker can operate those controls, legitimate functions such as defrosting become tools for disruption," he said.
"Changing a setting can destroy physical stock, not just interrupt a computer system."
Outside the home, connected technology is used to remotely manage industrial machinery and vehicles.
Cyber security expert Ken Munro pointed to a 2015 demonstration in which researchers remotely hacked a Jeep through its internet-connected entertainment system, leading to improvements in vehicle security.
"Fortunately, the vehicle industry woke up to this and fixed the problem," he said.
Mobile connections are also widely used to monitor equipment in power plants and water networks, allowing engineers to manage systems remotely.
Munro said UK utilities were generally good at securing these connections, but standards varied around the world.
His biggest concern was smaller, poorly funded utility companies that may still be relying on older, vulnerable equipment.
Without proper protections, "any factory or equipment" connected to the internet - from carmakers to electricity or transport infrastructure - could face similar risks, said Olivier Daloy, a cybersecurity expert at Zscaler.