RETAIL, LIKE many other industries, is innovating fast and becoming more technologically dependent, says Bray.

“When people think about cyber attacks, they often think of disruptions affecting software and online services, not physical hardware,” he says. “From self-checkouts to sophisticated inventory management systems and more, almost every part of the supermarket experience is now reliant on some form of connected technology to operate effectively. That means more vulnerabilities for retailers to monitor and manage.”

According to the BBC, dozens of supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland were hit earlier this week, including around 40 Delhaize stores. Freezer temperatures reportedly rose as high as 50C, and one Delhaize branch alone said it had lost €100,000 of produce.

The UK’s National Cyber Security Centre (NCSC) said it was working with international partners and industry, though no incidents have been reported in the UK.

“While the National Cyber Security Centre continues to investigate the root cause of the breach and the potential impact on UK supermarkets, initial reports suggest that attackers may have targeted internet-exposed appliance management software to manipulate temperature controls inside the fridges, turning one vulnerability into millions of euros of spoiled food and lost trading time,” says Bray.

He adds that the incident highlights how cyber incidents are moving beyond computer screens. Resilience measures – understanding how online and physical systems connect, restricting remote access, enforcing routine patching and having tested backup and recovery plans – “are no longer optional. They are the most effective ways retailers can protect consumers and minimise disruption.”

“The difference between a contained attack and major disruption will ultimately come down to how retailers prepare and whether they have identified their own vulnerabilities before attackers do.”