Home Electronics Identified as Next Target Following Supermarket Cyberattacks
Several cyberattacks targeting supermarkets have recently been recorded worldwide. Experts announced the new devices that could become the next targets of cyberattacks.
Contents
The world is witnessing a new type of cyberattack. Attackers are targeting utility devices such as refrigerators and blood storage units rather than smartphones and computers.
Since last week, commercial refrigerators and freezers at dozens of businesses across Europe have been targeted by cyberattacks. The attacks, carried out through security vulnerabilities in internet-connected industrial cooling equipment, raised the risk of physical product loss in the retail sector.
"Changing a system setting can destroy physical stock"
Tom Hegel, a researcher at cybersecurity firm SentinelOne, said retail companies must determine who is responsible for the cybersecurity of these systems alongside device maintenance. Stating that internet connectivity provides management convenience, Hegel noted that internal freezer functions such as defrosting could turn into tools of destruction if security is not established at the same pace. Hegel explained that changing a setting disrupts computer systems and can also directly destroy stored physical inventory.
Scans conducted by UK Cyber Defence researchers identified more than 800 refrigeration and building control interfaces in the country accessible directly via the internet. Researchers reported that exposed interfaces do not mean every system will inevitably be attacked, but weak passwords and unpatched software vulnerabilities leave systems vulnerable.
Supermarket chains step in for cyber resilience
The British government previously held cyber resilience meetings with food retailers following attacks targeting supermarkets. Helen Dickinson, CEO of the British Retail Consortium, stated that businesses are working with the NCSC to share information and strengthen defense lines. According to the reported information, cyberattacks targeting the M&S and Co-op supermarket chains in the UK in May 2025 left shelves empty and caused nationwide supply disruptions.
Are smart home devices at risk?
This is precisely the issue to examine. Many household appliances such as central heating systems, washing machines, and refrigerators can connect to the internet. While these connections offer remote control convenience and could theoretically be targeted by malicious actors, there is no data showing that home appliances can be easily compromised compared to commercial systems. Major manufacturers reportedly conduct extensive testing on device security, and no evidence has been found indicating home appliances were targeted in the recent supermarket attacks.
Be the first to know
Join our channel and get key developments straight on your phone.
Former NCSC CEO Ciaran Martin stated that manufacturers must produce smart devices more securely and said safer products should be demanded from technology companies. Martin advised consumers to regularly update device software and enable two-step verification on services that support it. Legislation that took effect in the UK in April 2024 mandated that certain smart device manufacturers meet minimum cybersecurity criteria regarding encryption and security patches.
The risk is not limited to cooling systems
The risk does not end with cooling systems alone. Internet connectivity is widely used in the remote management of industrial machinery, public infrastructure, and vehicles. Cybersecurity expert Ken Munro recalled that a 2015 demonstration where researchers remotely accessed a Jeep model via its internet-connected infotainment system led to fundamental improvements in automotive security.
Mobile networks are also used to remotely monitor equipment in water networks and power plants. Munro stated that UK utilities have been successful in securing these connections, but security standards vary worldwide. Munro noted that smaller utility companies with limited financial resources and older equipment face higher risks. Zscaler cybersecurity expert Olivier Daloy said that unless necessary protection measures are taken, any internet-connected industrial facility, from car factories to power and transportation networks, could be exposed to similar attacks.
This article was translated from Turkish. Read the original article in Turkish.