Ransomware Attack on Peter Green Chilled Disrupts UK Food Supply Chain A ransomware attack on Peter Green Chilled, a key distributor of refrigerated goods to major UK supermarkets, has caused significant disruptions to food deliveries across the country. The incident adds to a growing wave of cyberattacks targeting the retail and logistics sectors, following recent breaches at Marks & Spencer, the Co-op, and Harrods. The attack has exposed vulnerabilities in the UK’s supply chain, leading to delays, potential shortages, and concerns over consumer panic buying. Experts warn that such disruptions highlight the high stakes of cybersecurity in retail, where even brief outages can ripple through digital and physical operations. Andy Norton, European Cyber Risk Officer at Armis, emphasized that the sector’s reliance on digital supply chains, operational continuity, and customer data makes it a prime target. Data from Armis Labs shows 41% of retailers have faced increased cyber threats in the past six months, with 79% of IT decision-makers prioritizing proactive cybersecurity measures in the coming year. However, nearly half of surveyed retailers admit past breaches have left their systems inadequately secured, while 46% struggle with evolving regulatory complexities. Security analysts, including Nir Dvorkin of Cynet Security, link the attack to Scattered Spider (UNC3944), a group known for sophisticated tactics like phishing, SIM-swapping, and help desk impersonation. The group’s methods blend social engineering with the exploitation of legitimate remote access tools, making detection difficult. Dvorkin stressed that these attacks are not opportunistic but meticulously planned to bypass defenses. To counter such threats, experts recommend a layered defense strategy, including enforced multi-factor authentication (MFA), restricted remote access, and employee training to recognize social engineering attempts. Despite growing awareness 82% of retail employees know how to report suspicious activity only 46% of organizations claim real-time detection and response capabilities. With high-profile groups like Anonymous, DarkSide, and APT41 posing persistent threats, the retail sector faces mounting pressure to strengthen cyber defenses. The attack on Peter Green Chilled underscores how digital threats now directly impact the physical supply of essential goods, reinforcing the need for enhanced security, training, and regulatory alignment.

The Co-operative Group suffered a severe cyberattack in April, forcing parts of its IT systems offline. The breach resulted in a £206 million loss in revenue and an £80 million hit to profits in the first half of 2025, pushing the company into an underlying operating loss of £32 million (down from a £47 million profit the prior year). Attackers stole personal data of all 6.5 million members, including names and contact details, though no payment card or transaction data was compromised. The attack disrupted supply chains, left shelves empty, and paralyzed back-office operations, requiring discounts (£10 off £40) to retain customers. Regulatory investigations (e.g., by the Information Commissioner’s Office) were triggered, and four suspects (linked to Scattered Spider) were arrested. The attack involved social engineering to exploit help desk credentials, but Co-op claimed it prevented full ransomware deployment. Recovery efforts continue, with expectations of reduced cyber impact in late 2025.