Internet- and Wi-Fi-connected devices are no longer limited to phones and computers. Refrigerators, washing machines, and central heating systems are now part of the connected ecosystem. Recently, a suspected cyber attack across European supermarkets resulted in the hacking of commercial refrigerators and large freezers, raising fresh questions about the security of connected devices.
How Big is the Threat?
Internet-connected devices can be easily controlled remotely, and hackers frequently exploit this vulnerability.
This does not mean hackers can control every single device; home appliance manufacturers maintain that their technology is secure.
According to a research study, a Samsung smart fridge came under hacker control back in 2015.
There is currently no evidence directly linking the supermarket attack to residential home appliances.
UK cyber defense researchers identified over 800 refrigeration and building-control systems linked to retailers that can be accessed via the external internet. While this does not mean they have been hacked, it makes them primary targets for hackers exploiting weak passwords or software flaws.
What Do Experts Say?
Ciaran Martin (Former Head of UK's NCSC): Manufacturers must do more to secure connected devices. Consumers should keep devices updated and enable two-factor authentication wherever possible.
Tom Hegel (SentinelOne): Retailers must determine who is responsible for the cybersecurity of these appliances, not just their physical maintenance. Changing a single setting can spoil all the goods inside a freezer.
Helen Dickinson (British Retail Consortium): Such cyber incidents are a major concern for retailers.
Under UK legislation introduced in April 2024, smart home device manufacturers are required to comply with minimum cybersecurity standards, such as robust passwords and security updates.
Cyber attacks on UK retailers 'M&S' and 'Co-op' in May 2025 disrupted supply chains and caused product shortages in stores.
Cars, Power Plants, and Water Supplies Also at Risk
In 2015, researchers remotely hacked a Jeep via its internet-connected entertainment system, a flaw the auto industry subsequently fixed.
Power houses and water treatment plants are also heavily monitored using mobile and internet connections.
According to cybersecurity expert Ken Munro, while UK utility companies generally maintain good security standards, global standards vary. His biggest concern is smaller, underfunded companies that may still rely on legacy systems.
According to Olivier Deloy (Zscaler), any factory or connected equipment lacking proper security can face such threats.
What Can Everyday Users Do?
Always keep your smart device software updated.
Change default passwords and use strong, unique passwords.
Enable two-factor authentication (2FA) wherever possible.
