AI-verified — may contain errors. The verdicts and explanations on this page are generated automatically by AI. Always check the sources.

← Back to the article
Fact check

If hackers can take control of a supermarket freezer, how vulnerable is other tech?

BBC News Read the original

8.5 / 10 Partly supported

The score shows how well the checked facts are backed by independent sources at the time of the check. It is not a verdict of absolute truth, and not a rating of the publisher.

High confidence How is this calculated?

12 facts found in the article, 8 checked

Article published

Checked with claude-haiku-5-5 · Method 2026-10-10.

All checks of this article

Contradicted by other sources

  1. Contradicted UK supermarkets M&S and the Co-op were targeted by ransomware hackers in May 2025.

    AI Both retailers were targeted by ransomware-related attacks, but the results place the Co-op intrusion in late April 2025 (around 25 April), not May. May 2025 is when the M&S and Co-op disruption and data-theft disclosures came out, so the claim's date does not match the attack timing.

Verified facts

  1. Confirmed Supermarkets across Europe were hit by a suspected cyber-attack affecting their fridges and freezers.

    AI Several results report that suspected cyberattacks disrupted fridges and freezers at supermarkets in multiple European countries, including Belgium, Luxembourg, Ireland and Sweden. The RTE and Al Jazeera/Reuters pieces are the most specific, and the Al Jazeera article notes the attacks spanned a growing number of countries across Europe. Several of these reports appear to draw on the same Reuters-style wire coverage, so they are not fully independent confirmations.

  2. Confirmed In 2015, researchers demonstrated a vulnerability in a Samsung smart fridge that could allow them to intercept internet traffic.

    AI Several results (Reuters, The Economic Times, NewsNation, and The Business Standard) state that in 2015 researchers demonstrated at a Las Vegas hacking conference how a Samsung smart refrigerator could be compromised to intercept some internet traffic. The results do not name the specific researchers or the conference, so those details could not be checked. These articles appear to repeat the same underlying account rather than an independent primary source.

  3. Confirmed Since April 2024, UK law has required manufacturers of certain consumer smart devices to meet minimum cyber security standards.

    AI The UK Product Security and Telecommunications Infrastructure (PSTI) Act's requirements for manufacturers of consumer smart devices took effect on 29 April 2024, as stated by the NCSC (a UK government cyber agency, the primary source here) and repeated by two other sources. The results do not name the exact product list beyond examples, so that detail is not checked.

  4. Confirmed The NCSC said it was working with international partners and industry to understand the supermarket incidents and was unaware of any impact on the UK.

    AI Result 1 quotes an NCSC spokesman saying the NCSC is working with its international partners and industry to understand an incident, which matches the core of the claim. The snippet is truncated and does not show the statement that the NCSC was unaware of any UK impact, so that detail could not be checked. Result 1 is a Telegraph report repeated by Yahoo, so the support rests on one original source.

  5. Confirmed Researchers from UK Cyber Defence identified more than 800 refrigeration and building-control interfaces associated with British retailers that can be accessed over the public internet.

    AI The Cooling Post report states that a team at UK Cyber Defence Ltd found more than 800 refrigeration and BMS controllers in the UK reachable from the open internet, matching the claim's core figure and organisation. The headline ties these to UK supermarkets, which fits the claim's 'British retailers'. Only this single report addresses the count, so it is not independently corroborated.

  6. Confirmed The UK government has held talks with senior food retailers about cyber resilience following earlier attacks on supermarkets.

    AI The Grocer reports that Defra officials told MPs they have held talks with retail bosses to increase preparedness against cyberattacks on supermarket supply chains. A second result confirms earlier attacks on supermarkets (M&S's April 2025 cyberattack and the Co-op data theft), though it does not explicitly link the talks to those attacks. Both results appear to draw on the same parliamentary evidence, so the core is supported by one source.

Could not verify

No independent source settled these either way. That doesn’t mean they are wrong.

  1. Unverified There is no evidence that domestic appliances were targeted in the cyber-attacks which hit supermarkets in November.

    AI The results describe the supermarket freezer and fridge attacks (France in October, then several European countries) but never state whether domestic appliances were targeted or that there is no such evidence. The RTE explainer only says smart home appliances could be vulnerable in principle and that routers, not appliances, account for most attacks on connected devices, which is general industry data rather than evidence about the November supermarket attacks.

Not checked

We check a limited number of facts per article to keep the service free. These don’t count towards the score.

Author’s assumptions

Predictions or inferences in the article. They can’t be fact-checked.

How we handle corrections

Report an error