Malware · Threat Intelligence
Hackers defrost supermarket fridges across Europe, hitting British suppliers
Attackers took control of supermarket fridge systems across Europe, including in Britain, by exploiting old software. No stock was lost, but the incident highlights risks to food supply chains.
Ross Grant2 min read
The short version
Hackers broke into supermarket fridge systems in several European countries, including the UK, by taking advantage of old, unpatched software. They changed settings to defrost fridges, which could have spoiled food. No stock was lost in Britain thanks to quick action, but the incident shows that even basic equipment can be a target if not properly secured.
By the numbers
- 3British meat suppliers affectedRecorded Future News
- August 2026Firmware update available sinceRecorded Future News
- 2Waves of attacks reported in recent weeksRecorded Future News
What happened?
Hackers remotely accessed supermarket fridge controls across Europe, including British suppliers, in early November. Attackers exploited old vulnerabilities in Copeland XWEB controllers to defrost fridges, risking food spoilage. No group has claimed responsibility, and authorities say the overall impact was minimal, but affected businesses faced disruption.
Who is affected
The attacks targeted supermarket and grocery store refrigerator controls across Europe. In Britain, three meat suppliers and a fruit and vegetable wholesaler, Langridge Organic, were affected, according to the Association of Independent Meat Suppliers (AIMS) and company statements. The incident followed a similar wave of attacks in France. The affected businesses were using Copeland XWEB supervisory controllers, a type of device that manages refrigeration systems remotely.
How the attack worked
Attackers accessed the Copeland XWEB controllers by exploiting known vulnerabilities in the devices' firmware. According to a security note shared among AIMS members, versions 1.12.1 and earlier of the firmware had severe authentication bypass flaws. This means hackers could take control of the controllers without needing a password. Once inside, the attackers changed settings to put fridges into defrost mode, risking spoilage of perishable goods. Langridge Organic’s managing director said he interrupted a live attack by disconnecting a fridge from the internet after noticing it was being remotely manipulated.
The response
Copeland confirmed that some of its XWEB monitoring solutions were affected and said it had re-communicated patching and security guidance to customers. A firmware update to fix the vulnerabilities had been available since August, but the affected British suppliers had not installed it. The UK’s National Cyber Security Centre (NCSC) said it was aware of the attacks and had worked overnight to contact companies with vulnerable systems. NCSC staff described the overall impact as minimal, but stressed that for the businesses hit, the disruption was significant. AIMS is calling for the food sector to be recognised as critical national infrastructure, which could bring stricter security requirements.
What experts say
NCSC leaders said the attacks were not sophisticated and relied on flaws that had been public for months. They warned that many organisations still fail to apply basic cyber protections like patching known vulnerabilities. Ollie Whitehouse, NCSC’s chief technology officer, expressed surprise that so many critical systems remained exposed to the internet despite repeated warnings. The NCSC’s annual report highlighted the risk of a sharp rise in cyber incidents if such issues are not addressed.
What you should do
Businesses using internet-connected industrial controls should apply security updates as soon as they are available and avoid exposing these systems directly to the internet. The incident is a reminder that even non-IT infrastructure, like fridges, can be targeted if left unprotected.
Why it matters
This incident highlights how attackers can target overlooked systems like industrial controllers, not just computers. Food supply chains rely on these devices, and failing to patch known flaws can put businesses at risk. The story is a warning for all sectors to keep their systems updated.
Key points
- Attackers exploited unpatched vulnerabilities in fridge controllers.
- British and European food suppliers were affected, but no stock was lost in the UK.
- A firmware update to fix the flaw had been available since August.
- Authorities say the attacks were not sophisticated but highlight poor patching practices.
- Experts urge businesses to secure industrial systems and apply updates promptly.
Sources
Recorded Future News
Reference
