UK fridges hacked in cyberattack targeting several counties – here’s what you need to know

UK fridges hacked in cyberattack targeting several counties – here’s what you need to know The attack caused millions of Euros worth of fresh and frozen food to be spoiled - Bookmark - CommentsGo to comments Become an Independent member to bookmark this article Already a member? Log in British meat suppliers and supermarkets in seven European countries were forced to throw out their supplies after a suspected cyber attack. Fridges and freezers have been hacked with thermostats remotely cranked up in some cases to 50C (122F), while others have been set to “defrost” mode putting the heat to 15C rather than minus 22C. Hundreds of shops were targeted by the overnight cyber attack, which caused millions of Euros worth of fresh and frozen food to be spoiled. The UK National Cyber Security Centre has warned British retailers to urgently update the software on fridge temperature controllers adding that the attack is a “wake-up call” and our “digital infrastructure remains outdated and vulnerable”. Here, the Independent breaks down how an attack like this is possible and if the UK is under threat of more attacks. Which supermarkets were affected? Overnight supermarkets including Belgium branches of Carrefour, as well as Intermarché and Ikea, Coop and ICA in Sweden, Delhaize in Luxembourg, Kesko in Finland, SuperValu in Ireland and shops in Estonia have all had their fridges hacked. But a handful of meat suppliers in the UK have also been hit, according to retail magazine The Grocer. It reported that the temperature on fridges of the meat suppliers had been raised to 38C causing food to spoil. The National Cyber Security Centre (NCSC) chief executive Dr Richard Horne also told the BBC’s Today programme that it had "worked through the night" to alert potentially affected organisations in the UK and that it is aware of a "couple of impacts". It comes after French retailers were forced to bin piles of food when their fridges suddenly overheated. It’s thought this too was due to hackers seizing control of their internet-exposed appliance management software. Similarly, in August six military bases in the US were hit by fridge malfunctions, which is also being investigated as a cyber attack. Who is hacking the fridges? It’s not yet known who is responsible for the hack. So far, no politically motivated group has claimed responsibility and no gang has demanded the supermarkets pay any money. How is it possible? Commercial fridges are often connected to the internet so they can be monitored and kept at a regular temperature remotely. But this convenience also puts the fridges in a vulnerable position that’s open to hackers. Desktops and phones will go through regular updates to protect the devices against new vulnerabilities, but the software used for the fridges is often left for long periods of time without getting a security update. Is the UK at risk of future attacks? The National Cyber Security Centre (NSCC) is working to make sure “fridges and freezers are secure as possible against potential attacks,” according to Graham Wynn, the assistant director of regulatory affairs at the British Retail Consortium. But according to a report released by the NCSC the UK is at risk from a future attack. The report found the use of AI by hostile states and crime groups will increase the scale and speed of ransomware attacks, social engineering and the exploitation of vulnerabilities. The NCSC predicts that between now and 2028, AI-powered malware will have been used in a ransomware attack on critical national infrastructure in the UK. Cyber minister Baroness Lloyd of Effra said too many UK firms are at risk because they have not taken basic action to keep systems secure. Speaking at the launch of the National Cyber Security Centre’s annual report she said: “It’s a wake-up call, because despite the rapid take-up of technology across our nation, much of our digital infrastructure remains outdated and vulnerable. “Too many organisations still carry years of technical debt. Too many still rely on legacy systems, and too many still have not put cybersecurity fundamentals in place. “The reality is that even in the age of frontier AI, the basics still matter enormously. “The cyber attack on French supermarkets was a result of exploitation of known vulnerabilities. “It’s a clear demonstration that poor cyber hygiene, like weak passwords, continues to put organisations at risk.” Join our commenting forum Join thought-provoking conversations, follow other Independent readers and see their replies Comments