Recent cyber attacks targeting supermarket refrigeration systems across Europe have exposed a growing vulnerability in our increasingly connected world. As businesses embrace the Internet of Things (IoT), are they doing enough to secure the technology keeping their operations running?
This week, supermarkets and food suppliers across Europe have experienced cyber attacks targeting internet-connected refrigeration systems. By remotely manipulating temperature controls, attackers have disrupted operations and caused significant food losses in some European locations.
A small number of UK food suppliers have also been affected, although the National Cyber Security Centre (NCSC) has described the impact in Britain as minimal.
While connected fridges might seem an unusual target, these incidents highlight a much bigger challenge. As more everyday equipment becomes connected, the potential attack surface for cyber criminals continues to grow.
And the consequences can extend far beyond the digital world.
The hidden risks of connected technology
From smart refrigeration and manufacturing equipment to sensors and industrial control systems, IoT is transforming how businesses operate.
Connected technology offers enormous benefits, enabling real-time monitoring, greater efficiency, automation, and smarter decision-making. But there's a catch.
Every connected device introduces a potential vulnerability, particularly when ageing technology, weak access controls, or inadequate network security are involved.
Many Operational Technology (OT) environments were never designed with today's cyber threats in mind. Legacy systems, outdated software, and devices connected directly to the internet can leave critical operations exposed.
As organisations increasingly connect these environments with wider IT networks and cloud platforms, the need for a joined-up approach to security has never been greater.
When cyber attacks have physical consequences
Unlike traditional cyber attacks focused on stealing data or disrupting IT services, attacks on connected operational systems can have immediate, real-world consequences.
The recent refrigeration incidents demonstrate this clearly. A compromised temperature controller isn't a technology problem in isolation. It can result in spoiled stock, interrupted supply chains, financial losses, and potential food safety concerns.
And these risks aren't limited to the food industry.
In manufacturing, compromised machinery could bring production lines to a halt. In healthcare, disruption to connected equipment could affect the delivery of critical services. Across utilities and infrastructure, poorly secured operational systems could threaten the continuity of essential services.
IoT security needs to go further than protecting devices and data. It should protect the operations that businesses and communities depend on.
Industrial IoT security isn’t just about protecting data - it’s about protecting uptime, safety, and trust. Every environment is different, which is why effective IIoT security starts with understanding how systems actually operate on the ground, not just how they look on a network diagram.
Why securing the network matters as much as securing the device
As IoT adoption accelerates, organisations need to consider both the security of individual devices, and how those devices connect, communicate, and interact with wider business systems.
An internet-connected device with weak authentication can create an opportunity for unauthorised access. Without appropriate network controls, a compromised device may also provide a route into other parts of an organisation's infrastructure.
That's why secure connectivity needs to be embedded into an organisation's IoT strategy from the outset.
A robust approach should include:
Complete network visibility: Understanding what devices are connected, how they're communicating, and where potential vulnerabilities exist.
Network segmentation: Separating critical operational systems from wider IT environments to reduce exposure and limit the spread of threats.
Zero Trust security: Verifying users, devices, and connections before allowing access to sensitive systems.
Secure remote access: Enabling authorised employees, engineers, and third-party suppliers to access operational equipment without unnecessary exposure.
Continuous monitoring and threat detection: Identifying suspicious activity early and enabling rapid responses to potential incidents.
Proactive vulnerability management: Keeping software and firmware updated wherever possible, while introducing compensating security controls for legacy systems that cannot easily be patched.
Crucially, these measures need to balance security with operational performance. For businesses relying on always-on technology, implementing protection shouldn't mean introducing unnecessary downtime or disruption.
Building resilience with Nasstar
At Nasstar, we understand that connectivity and security must go hand in hand.
Through our expertise in secure networks, Industrial IoT, and Operational Technology security, we help organisations build connected environments that are reliable, resilient, and secure by design.
From improving network visibility and segmentation to implementing Zero Trust principles, secure remote access, and advanced threat protection, our solutions help businesses reduce exposure and protect critical operations.
By bringing networking, security, and ongoing management together, we help organisations navigate the complexities of connected technology with confidence. While the opportunities presented by IoT are enormous, realising them requires a secure foundation.
It's not just about what your technology can do. It's about how well you can protect it.
Is your connected infrastructure secure?
The recent refrigeration attacks are a timely reminder that cyber criminals don't necessarily need to target sophisticated systems to cause serious disruption.
As organisations continue to invest in connected technology, now is the time to review how devices, networks, and critical operational environments are protected.
Explore Nasstar's Industrial IoT Security Solutions to build a more resilient connected environment.
