UK Food Supply Chain Under Sustained Cyber Attack
The Attack Timeline and Impact

The UK retail sector's critical vulnerability to supply chain attacks was starkly exposed when Peter Green Chilled, a Somerset-based logistics company, fell victim to ransomware on May 14, 2025. This wasn't an isolated incident but part of a coordinated assault on UK food infrastructure:
[cite author="John Leonard, Research Editor" source="Computing.co.uk, May 20 2025"]The UK retail sector has endured another cyberattack with logistics company Peter Green Chilled, which distributes perishable food supplies to major supermarkets, struck with ransomware last Wednesday.[/cite]
The scope of impact reveals the concentration risk in UK food distribution:
[cite author="Tom Binks, Managing Director Peter Green Chilled" source="Email to clients via BBC, May 15 2025"]The attack forced the company to halt order processing on Thursday, although transport activities have not been affected. The firm, which supplies Tesco, Sainsbury, Asda, Waitrose, Co-op, Morrisons, M&S and Aldi, was providing regular updates to clients and implementing workarounds to maintain deliveries.[/cite]
Pattern of Escalating Attacks
This represents the fourth major attack on UK food retail in recent weeks:
[cite author="Computing.co.uk" source="May 20 2025"]The incident comes after household names Marks & Spencer, Co-op and Harrods all suffered disruption in recent weeks after key systems were taken down by ransomware.[/cite]
The Blue Yonder incident demonstrates the cascading impact of supply chain software attacks:
[cite author="Industry Analysis" source="September 2025"]Blue Yonder, a US supply chain software firm that provides software to over 3,000 customers including Tesco, Morrisons, Sainsbury's, and ASDA, was hit by a ransomware attack. Morrisons confirmed it suffered significant disruption affecting supplies to its stores.[/cite]
Criminal Networks and Arrests
Law enforcement has made progress identifying the perpetrators:
[cite author="Security Report" source="2025"]Four people, including three teenagers and a 20-year-old woman, were arrested in connection with cyber attacks that crippled M&S, the Co-op and Harrods, with the group allegedly unleashing ransomware that stole millions of customer records, shut down online orders and left supermarket shelves bare.[/cite]
Industry Vulnerability Assessment
Experts highlight systemic weaknesses in food supply chain security:
[cite author="Cybersecurity Analysis" source="2025"]There has been a huge increase in ransomware attacks on the food and distribution sectors in recent years, with 41% of retailers seeing an increase in threat activity over the last six months. Experts forecast a potential increase in cyber attacks on vital suppliers in 2025, labeling suppliers as low-hanging fruit for hackers who frequently do not have sufficient cybersecurity budgets or simply neglect data protection.[/cite]
Infrastructure Fragility
The digitization of supply chains has created new vulnerabilities:
[cite author="Computing.co.uk Opinion" source="2025"]Food supplies are part of critical national infrastructure, but the digitisation and automation within international supply chains have left the UK in a vulnerable position. With many supermarkets moving to cashless payments only, the failure of third-party card payment systems can have a wider impact - in July 2024 Sainsbury's, M&S, Asda and others were unable to take card payments for over an hour due to a technical issue at payment provider Worldline.[/cite]
Recommendations and Response
Industry experts emphasize collaborative defense strategies:
[cite author="Security Experts" source="2025"]Experts suggest the necessity for more robust collaboration between public and private entities to combat cybersecurity threats, recommending that businesses expand their security measures beyond internal networks, with supplier verification, regular audits, and boosting staff training.[/cite]
Legislative Response
The UK government is responding with new legislation:
[cite author="UK Government" source="2025"]The Cyber Security and Resilience Bill is an important step towards protecting food supplies from the increasing risk of cyberattacks and other IT related issues.[/cite]
