A cyberattack targeting supermarket refrigeration systems across Europe could be an early warning of a much broader wave of digital disruption, Britain’s leading cybersecurity official has
warned, highlighting the growing risks posed by outdated technology and increasingly sophisticated hackers.
Richard Horne, head of the UK’s National Cyber Security Centre (NCSC), said the attacks demonstrated how vulnerabilities in ageing digital infrastructure could translate into serious real-world consequences. The NCSC operates as part of Britain’s intelligence agency, GCHQ.
On Monday, supermarkets in several European countries, including Sweden, Belgium and France, experienced cyberattacks affecting their refrigerators and freezers. The incidents exposed weaknesses in the information technology systems controlling refrigeration equipment, forcing affected stores to dispose of substantial quantities of food.
Speaking on Tuesday after delivering a speech marking the publication of the NCSC’s annual report, Horne described the incidents as only the beginning of a potentially much larger problem.
“This is just the foothills, as it were,” he said, warning that the number of exploitable weaknesses in digital systems remains alarmingly high.
“There are so many vulnerabilities out there that in some ways you could say are waiting to be exploited,” Horne added.
According to the cybersecurity chief, the immediate concern is not necessarily the emergence of entirely new hacking techniques, but the sheer scale and frequency of attacks against vulnerable systems.
“The most serious risk we face in the short term is just a huge rise in the volume of incidents,” he said.
The warning comes as businesses across Europe increasingly depend on interconnected digital infrastructure to manage essential operations. Systems controlling refrigeration, energy consumption, logistics and other industrial processes can become potential targets when security protections are inadequate or software is no longer properly maintained.
The supermarket incidents illustrate how cyberattacks can extend beyond conventional IT disruptions, affecting physical operations, supply chains and food security. A failure in refrigeration systems can quickly result in financial losses, wasted products and operational difficulties for retailers.
The NCSC’s annual report also highlights the growing role of artificial intelligence in the cyber threat landscape. The agency expects AI to strengthen hackers’ capabilities in the coming years, potentially enabling them to identify weaknesses, develop attack methods and conduct operations more efficiently.
However, British cybersecurity officials believe advanced AI was probably unnecessary in the supermarket incidents. The attacks appear to have exploited known weaknesses in older technology, demonstrating that even relatively established vulnerabilities can pose significant risks when they remain unaddressed.
The distinction is important for businesses and public authorities. While the development of AI-powered cyberattacks presents a growing challenge, organisations may already be exposed to serious threats through outdated equipment, inadequate security measures and systems that have not received essential updates.
Horne’s warning suggests that Europe’s cybersecurity challenge is becoming increasingly urgent: organisations must strengthen the security of existing infrastructure while preparing for a future in which artificial intelligence could make cyberattacks more frequent, scalable and difficult to contain.
For supermarkets and other operators of critical infrastructure, the message is clear. Digital security can no longer be treated as a problem confined to computers and corporate networks. When connected technology controls essential physical systems, a cybersecurity failure can rapidly become a real-world crisis. Photo by Jean Housen, Wikimedia commons.
