AI-verified — may contain errors. The verdicts and explanations on this page are generated automatically by AI. Always check the sources.

← Back to the article
Fact check

If hackers can take control of a supermarket freezer, how vulnerable is other tech?

BBC News Read the original

8.3 / 10 Partly supported

The score shows how well the checked facts are backed by independent sources at the time of the check. It is not a verdict of absolute truth, and not a rating of the publisher.

High confidence How is this calculated?

13 facts found in the article, 8 checked

Article published

Checked with claude-haiku-5-5 · Method 2026-10-10.

All checks of this article

Contradicted by other sources

  1. Contradicted The cyber-attacks that targeted supermarkets took place in November.

    AI The main supermarket cyber-attack, on French stores (Intermarché, Netto, Carrefour, Coopérative U and others), took place on the night of 11 October 2026 (Wikipedia) and on 12 October (Euronews). November 2026 reports describe a separate, second wave of freezer failures in other European countries such as Belgium and Sweden, so the claim is only accurate for that later wave.

Verified facts

  1. Confirmed Supermarkets across Europe were hit by a suspected cyber-attack affecting their fridges and freezers.

    AI Multiple results report that supermarkets across several European countries (Belgium, Luxembourg, Sweden, Estonia, and others) had fridge and freezer temperatures spike in a suspected cyberattack, with food ruined. The core of the claim is supported by the Independent and AP reports, with The Times and Al Jazeera/Reuters adding further confirmation; these largely share the same wire-based reporting of the same event, so the independence of sources is limited. Details such as the exact number of countries or stores were not fully checkable from the snippets.

  2. Confirmed There is no evidence that domestic appliances are being targeted in the cyber-attacks on supermarkets.

    AI The AOL article states directly that there is no evidence domestic appliances are being targeted in the cyber-attacks that hit supermarkets in November, which matches the claim. The snippet does not name the original source of that statement, so it cannot be checked against a primary document.

  3. Confirmed In 2015, researchers demonstrated a vulnerability in a Samsung smart fridge that could allow them to intercept internet traffic.

    AI Multiple results state that in 2015 researchers demonstrated, at a Las Vegas hacking conference, how a Samsung smart refrigerator could be compromised to intercept some internet traffic passing through the device, matching the claim's core. The results repeat similar wording and appear to derive from a common explainer source (the KSL/Reuters-style explainer), so they are not fully independent; the specific conference detail is mentioned but the claim itself does not depend on it.

  4. Confirmed Since April 2024, UK law has required manufacturers of certain consumer smart devices to meet minimum cyber security standards.

    AI Multiple results state that the UK's Product Security and Telecommunications Infrastructure (PSTI) Act's minimum security requirements for consumer connectable products took effect on 29 April 2024, requiring manufacturers to meet them before sale. The results do not give the exact list of covered devices beyond examples, but those examples are consistent with the claim's 'certain consumer smart devices'.

  5. Confirmed Researchers from UK Cyber Defence identified more than 800 refrigeration and building-control interfaces associated with British retailers that can be accessed over the public internet.

    AI The AOL report repeats the claim's core almost word for word: UK Cyber Defence identified more than 800 refrigeration and building-control interfaces associated with British retailers that are reachable over the public internet. The firm's own report (result 4) independently confirms over 800 internet-exposed controllers in the UK, placed in supermarkets and similar sites, though it does not use the phrase 'British retailers'. Result 2 adds that this shows potential exposure, not confirmed compromise, which does not contradict the claim.

  6. Confirmed The UK government held talks with senior food retailers about cyber resilience following earlier attacks on supermarkets.

    AI Result 2 explicitly states that the government has held talks with senior food retailers about cyber resilience following earlier attacks on supermarkets. Results 1 and 3 independently describe Defra holding talks with retail bosses or supermarkets over cyberattack risks to the food supply chain. The results do not explicitly confirm the 'earlier attacks' detail beyond result 2, and results 1 and 3 may both derive from the same Defra committee evidence coverage.

Could not verify

No independent source settled these either way. That doesn’t mean they are wrong.

  1. Unverified The NCSC said it was unaware of any impact on the UK from the supermarket cyber-attacks.

    AI The results report that the UK was not affected, but that comes from the article's own wording. The NCSC's quoted statement only says it is working with partners to understand the incident, not that it was unaware of any UK impact. Result 3 covers separate UK retail attacks, so it neither confirms nor contradicts the claim.

Not checked

We check a limited number of facts per article to keep the service free. These don’t count towards the score.

Author’s assumptions

Predictions or inferences in the article. They can’t be fact-checked.

Opinions

Views and judgements, the author’s or someone quoted. Not fact-checked.

How we handle corrections

Report an error