decrypted · 2 november 2026 · vulnerabilities and patching · uk policy and law · ai and llm security

Supermarket freezers told to defrost, and the UK has the same open door

Overnight, attackers told supermarket freezers across Europe to defrost. BleepingComputer reports more than 115 stores affected in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. No UK store has been reported hit, and the NCSC, the National Cyber Security Centre, says it is working with international partners to understand the incident. But the door these attackers used is one the UK has left open too.

What happened

The attackers remotely changed temperature settings, shut some units down and forced others into defrost. A Swedish store manager told broadcaster TV4 that settings had been pushed to +50°C and could not be changed back, so frozen stock was thrown away. Ahold Delhaize reported around 40 locations in Belgium and Luxembourg, and 13 SuperValu stores in Ireland were hit. The Belgian contractor Sabcobel, which looks after fridges for several affected stores, said the attacker used the same weakness as in France last month.

How it works

Think of a cold room fitted with a doorbell that rings anywhere in the world, protected only by a lock the maker says is out of date. The controllers are small computers bolted onto the refrigeration plant: operational technology, or OT, the computers that run machinery rather than office IT. In France, the national agency named Danfoss AK-SM and AK-SC controllers, plus Copeland and Dixell Xweb units, as the targets. The attackers needed a login page reachable from the internet.

Danfoss says affected units ran outdated software. Sabcobel says an update alone is not enough, because the units also need physical modifications. SecurityWeek reported that Claroty researchers had disclosed flaws in one Danfoss model about two months before the French attacks, but said it was unclear whether those were used.

What the defender sees

Rarely an intrusion alert. Temperatures climb and settings will not hold. Ahold Delhaize warned store managers by text message around 4am, and some stores borrowed refrigerated lorries to protect stock.

The UK exposure and the design lesson

In October, UK Cyber Defence told The Grocer that more than 800 UK retailer fridge and building controllers could be reached from the public internet. Only 15 of them were the Danfoss model at issue. Its founder said they were usually put there by a maintenance contractor so engineers can "dial in from the van". The Grocer also reports that several UK meat processors have been hit, with one supplier's fridges set to defrost every hour.

The NCSC has urged supermarkets to keep an accurate record of their OT and to make sure controllers run the latest software. That is necessary, and it is the second-best answer. The Secure by Design answer is that a management page should never face the public internet. Remote maintenance should arrive through a VPN, an encrypted private tunnel, or a brokered connection, with the supplier contractually bound to use it. Applying that costs an afternoon of inventory and one awkward conversation with a contractor. Not applying it costs a night of stock.

Also this week

Binance, and one laptop. The FBI attributes the theft of more than $6 billion from Binance, on or about 29 October, to North Korea's TraderTraitor group. BleepingComputer puts the total at about $6.36 billion and calls it the largest crypto heist on record. Binance says a compromised DevOps engineer's laptop let attackers reach a service container and submit unauthorised withdrawals, though its co-chief executive said the attack was more complex than one person's permissions. It says it has covered about 95% of the affected amount. The design lesson is blast radius: no single workstation should be able to move that much money without a second, independent control. Reporting does not establish that UK customers lost funds, but guidance from the Financial Conduct Authority says crypto investors are unlikely to have access to the Financial Ombudsman Service or the compensation scheme behind it. Whoever holds your assets, ask what one stolen laptop could do.

The ICO asks what your AI agents are allowed to do. On 8 October the ICO, the Information Commissioner's Office and the UK's data regulator, said ten AI developers, including Amazon, Anthropic, Apple, Google, Meta, Microsoft and OpenAI, had made or committed to data protection changes. It also opened a call for evidence on agentic AI, software that acts on your behalf, covering security, transparency, accountability and lawful use of data. Responses close on 20 November. The regulator has made enquiries with OpenAI, Anthropic, Meta and the AI Security Institute after reports that some agents bypassed protections and reached external systems, and it has paused engagement with X.AI while it investigates Grok. None of that is new this week, but the deadline is close. If your organisation lets an agent touch staff or customer data, expect to be asked which permissions it holds and what is logged. Answering the consultation is a cheap way to be heard before the statutory code arrives.

Sources

If your site controllers or suppliers worry you, get in touch.