Cyber Breach Disrupts Supply Chains of Major UK Supermarkets

A logistics firm working with major UK supermarkets such as Tesco, Sainsbury's and Aldi has experienced a ransomware attack. The incident serves as a stark reminder of the increasing importance of securing supply chains against cyber threats.

Peter Green Chilled, based in Somerset, which specialises in transporting chilled food to regional outlets, reported the cyber attack occurred on the evening of 14 May.

In an email seen by the BBC which was sent to stakeholders the following day, Peter Green Chilled disclosed that hackers were holding the company to ransom, forcing a temporary cessation of their order processing operations.

"The transport activities of the business have continued unaffected throughout this incident," stated Tom Binks, Managing Director at Peter Green Chilled. However, further details about the nature or extent of the attack were not provided.

Supply chain cyber risk exposed

Ransomware attacks involve cyber criminals encrypting data and denying access to computer systems until a ransom is paid.

Although larger retailers like Marks & Spencer and Co-op have faced similar cyber attacks, the impact on a smaller logistics provider like Peter Green Chilled highlights the significant challenges these businesses face within crucial supply chains.

Dray Agha, Senior Manager of Security Operations at Huntress, says: "Cyber criminals are deliberately targeting parts of the supply chain that create maximum chaos. When chilled food distributors go offline, products spoil and shelves go empty fast.

"Cyber criminals know the ticking deadline they've created and are most likely to get paid because they have seized and held hostage critical business functions."

This incident underscores the fact that vulnerabilities within supply chains can create ripple effects, disrupting operations across interconnected networks.

Industry specialists argue that hackers may strategically choose targets within these supply frameworks, exploiting areas perceived as weak links.

Sian John, CTO at the cybersecurity company NCC Group, comments: "As retailers ramp up their own cyber defences, hackers will be looking to capitalise on the chaos to conduct further attacks. One weak spot that so often gets overlooked is the supply chain.

"It's easy to focus on internal systems and believe your business is secure. But the reality is that a single vulnerability in your supply chain can cascade across the entire network, bringing operations to a standstill."

A need for collaboration

Ilia Kolochenko, CEO at ImmuniWeb, foresees a potential increase in under-the-radar cyber attacks on vital suppliers in 2025.

"Cybercriminals – in contrast to relaxed, VC-backed cybersecurity firms – are militarily pragmatic, focusing their efforts on the fastest and most cost-efficient ways to compromise the data they need," Ilia explains. 

He labels suppliers as "low-hanging fruit" for hackers, who may lack the cybersecurity resources or mistakenly believe they are not targets. "Frequently, they do not have sufficient cybersecurity budgets or simply neglect data protection," Ilia cautions.

Experts like Sian suggest the necessity for more robust collaboration between public and private entities to combat these cybersecurity threats. Recommending that businesses expand their security measures beyond internal networks, she advocates for supplier verification, regular audits, and boosting staff training.

"Cybersecurity is a shared responsibility," she notes. "Government bodies, regulators and industry groups must work together to share intelligence, offer guidance and promote best practices that protect the integrity of our national infrastructure."

Implementing enhanced collaborative efforts across the supply chain will be crucial as the frequency and sophistication of cyber threats continue to evolve, necessitating comprehensive and proactive security strategies.

Explore the latest edition of Procurement Magazine and be part of the conversation at our global conference series, Procurement & Supply Chain LIVE.

Discover all our upcoming events and secure your tickets today.

Procurement Magazine is a BizClik brand