When the Cold Chain Becomes a Target
For most of us, a fridge is one of the most dependable objects in the kitchen. It hums quietly, keeps milk fresh and rarely asks for attention. That assumption is now being tested. Over the past few weeks, hackers have pushed refrigeration systems in retailers across Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden past dangerous temperatures, with some units reportedly climbing as high as 50C. Food suppliers in the UK have now been drawn into the same wave, and the lesson stretches well beyond the warehouse door.
The UK’s National Cyber Security Centre has said the national impact so far is minimal, and no major grocery chain has been directly hit. Still, the details matter. One London fruit and vegetable wholesaler, Langridge Organic, found that hackers had changed the settings on several units to defrost for more than four hours at 150C. Staff only stopped the damage by unplugging their cold storage from the internet entirely. A meat industry body representing more than 300 members said some firms had been caught as collateral, with cold units rising to 100C at one supplier and others beginning to defrost. Fortunately, the units were empty, and no meat was lost.
Old Tech, Default Passwords and a Familiar Playbook
What makes these incidents so unsettling is how unremarkable the weak points were. Investigators have found that the French supermarket attacks involved legacy technology connected to the internet with default passwords still in place. The fridge control system at Langridge was developed by the US firm Copeland, which has recommended software fixes to affected customers. Researchers tracking attacks on dummy Danfoss controllers, deliberately placed online as lures, recorded hundreds of login attempts in a short window, most using publicly documented factory credentials. Some of the infrastructure they examined overlapped with hosting previously tied to Russian-linked malicious operations, though no group has been formally named. Nothing here required cutting-edge artificial intelligence. The hackers simply walked through doors that had been left open for years.
That is precisely why the NCSC’s chief executive, Richard Horne, described these attacks as the “foothills” of a larger threat. As AI tools become better at scanning networks and spotting neglected flaws, the number of exposed systems that can be found and exploited is likely to rise. Cheap, connected equipment in shops, warehouses and homes all shares the same basic problem: it was often built to be convenient rather than secure, and it is rarely patched once installed.
Why Buyers Should Care About Connected Equipment
For anyone shopping for smart appliances, this story is a practical signal. Connected fridges, freezers, thermostats and home cooling systems are becoming easier to buy and more tempting to choose for their app controls and energy tracking. The NCSC’s chief technology officer, Ollie Whitehouse, has argued that manufacturers need encouragement to build safer products, and that consumers must be willing to pay more for equipment that receives security updates and ships without default credentials. That is a real trade-off, and the price of a device is no longer the only number that counts. Before adding any internet-connected appliance to a home or business, buyers should check how long the manufacturer commits to firmware updates, whether passwords must be changed at setup, and whether the device can operate safely offline. As tech adoption spreads into everyday kitchens and commercial cold rooms, security support is quickly becoming as important a purchase feature as temperature range or capacity.
