Fridge cyber-attacks reach UK as meat suppliers’ units hit 100C, but no meat lost

The wave of fridge cyber-attacks that disrupted supermarkets across Europe has now reached Britain, with several UK meat suppliers reporting that their cold storage overheated or began defrosting overnight. Luckily, the damage appears to have been limited, because the affected units were empty at the time.

The Association of Independent Meat Suppliers (Aims), which represents roughly 300 firms, said a few of its members had “unexpectedly become collateral” in the hack. One company saw its refrigeration climb as high as 100C, while two others reported units starting to defrost. Because of the way abattoirs typically operate, nothing was inside. “None who have been affected have lost any meat,” a spokesman said, but he called the episode a reminder that food businesses “may be seen by some as targets”.

What happened across Europe and in the UK

The UK incidents followed a day after retailers in Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden reported refrigeration faults, with some temperatures reportedly reaching 50C. Similar problems were reported in France last month. It has since emerged that the French attack exploited legacy equipment connected to the internet and protected only by default passwords.

No major UK supermarket chain is understood to have been directly affected. The most vivid British account came from Alex Pearce, managing director of London wholesaler Langridge Organic. Six of his 10 fridges were tampered with on Monday morning. Manual checks showed abnormal temperatures and defrost settings, so he suspected a hack and unplugged the network cable. By his account, the hackers had altered six, seven or eight parameters in each unit, including settings that triggered long defrost cycles. He and his staff reset them before any stock was damaged. “I reckon I caught them by luck right in the middle of it being hacked,” he told BBC Radio 4.

What the NCSC says about the fridge cyber-attacks

The National Cyber Security Centre (NCSC) described the national impact as “minimal” and said it was working with the affected organisations. Its chief executive, Richard Horne, said staff worked through the night contacting firms whose vulnerable technology was exposed online. He said “handfuls” of UK organisations had been alerted and that officials knew of a couple of impacts, though “we don’t know the full impact”.

On who is responsible, officials were cautious. Horne said it was too early for a definitive answer, and the NCSC’s director of operations, Paul Chichester, said the agency could not comment on culprits. He did say the attacks were not AI-enabled and relied on weaknesses that had been “out there for a long period of time”. Separately, cybersecurity experts told the Guardian that attacks on decoy fridge controls, deliberately left online to attract hackers, showed characteristics similar to operations linked to Russia. That is an observation from researchers rather than an official attribution.

A warning about the “foothills”

The NCSC used the incidents to make a wider point. Horne called them the “foothills” of a bigger threat, as AI tools expose flaws in networks that owners have neglected to patch. In his speech launching the agency’s annual report, he said the UK had left itself exposed through decades of “tech on the cheap”. The agency’s chief technology officer, Ollie Whitehouse, argued that manufacturers must be pushed to build safer products and that buyers must accept paying more for them.

The annual report offers context for the scale of the problem. The NCSC received 1,831 reports of cyber-attacks this year, 337 of which needed support and 80 of which were judged nationally significant. It also warned 8,500 organisations that their systems had been compromised.

Asked whether the episode backed up the Defence Secretary’s advice that people should stockpile supplies, Horne replied “absolutely”, pointing to criminal attacks on UK retailers last year. “At the end of the day, it’s your business. It’s your charity. It’s your life,” he said. “You need to make the choice and choose wisely.”

What the industry is doing

Retailers are being urged to monitor their systems, keep software up to date and prepare contingency plans in case food has to be moved. The British Retail Consortium said its members invest heavily in cybersecurity and are working with the NCSC to secure their fridges and freezers. The British Frozen Food Federation said members are assessing how vulnerable their freezer systems might be.

For now, the lesson of these fridge cyber-attacks in the UK is as much about luck as resilience. Empty units and one quick-thinking wholesaler kept this round of tampering from becoming a food-loss story. The NCSC’s message is that old, internet-connected equipment with weak passwords will not always be so forgiving.

Explore more on this topic with Vexel Search.