When a Cyberattack Makes Refrigerators Overheat: The Growing Risk to Physical Infrastructure

Cybersecurity is no longer just about protecting information. As businesses connect more equipment to digital networks, a compromised system can affect physical operations, inventory and customer safety.

Cyberattacks are often described in terms of stolen passwords, leaked databases or websites taken offline. But what happens when the system an attacker compromises controls the temperature of a refrigerator?

In France, a cyberattack targeting connected supermarket refrigeration systems caused temperatures to rise dramatically, reportedly reaching 50°C in some cold-storage areas. Hundreds of supermarket locations were affected, with spoiled food and fires among the reported consequences.

Separately, British fashion retailer TFG London reported a cybersecurity incident affecting its brands Phase Eight, Hobbs and Whistles. The incident disrupted some IT systems and online services, prompting the company to pause online orders while it investigated.

The incidents are separate, but together they highlight an important reality: the consequences of cybersecurity failures increasingly extend beyond the digital world.

The connection between software and physical operations

Businesses use connected systems to improve efficiency, reduce manual work and monitor operations remotely.

In supermarkets, refrigeration controllers can regulate temperatures and manage defrosting cycles. In factories, industrial control systems operate machinery. In buildings, connected systems may manage access, lighting, heating and ventilation.

These technologies offer significant benefits. They also create potential points of entry for attackers.

When a connected control system is inadequately secured, an attacker may be able to alter settings, disrupt operations or interfere with equipment. The impact depends on the system, the attacker's level of access and the safeguards in place.

The French incident illustrates the potential consequences when digital access reaches systems responsible for preserving perishable goods.

Why outdated systems are a serious problem

Connected operational technology can remain in service for many years. Unlike ordinary office software, replacing industrial or refrigeration equipment may require significant expense, specialist installation and operational downtime.

As a result, some organisations continue using systems that no longer receive security updates or that were never designed for exposure to modern networks.

This creates a difficult balance between maintaining business operations and reducing security risks.

Organisations can begin by identifying every connected device, checking whether it is still supported, limiting unnecessary internet exposure and restricting administrative access. Network segmentation can also help prevent a compromised device from reaching unrelated business systems.

Where updates cannot be installed immediately, additional monitoring and isolation may reduce exposure while a longer-term replacement plan is developed.

Cybersecurity is also business continuity

The French supermarket attack demonstrates how digital interference can result in damaged inventory, equipment problems and interrupted trading.

The separate TFG London incident shows how an IT disruption can affect online orders and customer-facing services even while physical shops continue operating.

For businesses, the cost of an incident is therefore broader than the technical work needed to restore systems. It can include lost revenue, customer complaints, emergency repairs, regulatory obligations and reputational damage.

A practical cybersecurity strategy should include incident response, clear responsibilities, tested recovery procedures and communication plans. Backups are essential, but they do not replace safeguards for systems that directly control physical equipment.

What this means for the cybersecurity workforce

As businesses digitise their operations, the need for people who understand both information security and operational technology is likely to remain important.

Relevant areas include network security, vulnerability management, identity and access control, security monitoring, incident response and industrial control system protection.

For technology learners in Nigeria, these incidents provide a useful reminder that cybersecurity is a broad discipline. Understanding how systems work and how failures can affect real people is just as important as learning security tools.

TEKHUB offers a starting point for exploring practical technology skills and learning pathways relevant to the evolving digital economy.

The bigger lesson

A refrigerator that overheats because of a cyberattack may sound unusual, but the underlying risk is not. As more physical infrastructure becomes connected, software security becomes part of operational safety and business resilience.

The goal is not to stop businesses from connecting their equipment. It is to ensure they do so with appropriate security controls, monitoring and recovery plans.

As more of the physical world becomes connected, are businesses investing enough in protecting the systems that keep their operations running?