Cyber security a growing threat for food retailing

In June, a cyber attack forced major US distributor United Natural Foods Inc. to stop deliveries to more than 30,000 North American grocery stores. David Marcotte, senior vice president of global retail and technology at Cybersecurity has rapidly emerged as a highly variable and constant threat to mid-sized groceries that lack the broader capabilities of large IT shops. The emergence of criminal groups selling sophisticated tools for hacking has opened retail to attacks.

Marks and Spenser case

In April 2025, British retailer Marks and Spencer was hit by a significant cyber attack that disrupted its online ordering and in-store payment systems over several weeks. The incident, involving unauthorized access believed to be linked to a ransomware group, forced the retailer to halt online sales, revert to manual processes in parts of its operations, and absorb a substantial financial impact.

UK government takes action to reduce risk

UK parliament formally introduced the Cyber Security and Resilience Bill was formally introduced to Parliament last November. The Bill expands the existing Network and Information Systems Regulations, setting tougher standards for essential services and digital infrastructure, improving incident reporting requirements and giving regulators broader powers to respond to emerging threats.

Growing impact of cyber attacks

Alongside legislative action, government-backed research published with the Bill highlights the growing economic toll of cyber attacks across the UK economy. This evidence reinforces the need for stronger protections for businesses of all sizes, including those in food production and retail supply chains that increasingly depend on digital systems for inventory, logistics and customer engagement. Sources: FPC and NRF. Picture: FPC.

Domino effect along the supply chain

The attacks have direct implications for the grocery sector, with disruption to stock availability reported in some stores and logistical challenges emerging across fresh food supply lines. For fresh produce suppliers and distributors reliant on real-time IT systems to manage short shelf lives, forecasting and daily replenishment, recent incidents serve as a stark reminder of how cyber disruption can quickly translate into operational strain.

For more information on cyber security and food retailing, you can write here.