UK's Food Supply Is Fragile. Hackers Are One of the Reasons Why.
Britain's public spending watchdog says the government hasn't done enough to protect food supplies from climate shocks, disease outbreaks, and cyberattacks. Ordinary shoppers could feel the pinch when the next disruption hits.
Key points
- The National Audit Office (NAO), the UK's independent public spending watchdog, warned in 2024 that food supply chains face growing threats from climate change, disease, and cyberattacks.
- The NAO urged Defra, the government department responsible for food and farming policy, to build closer ties with households, businesses, and communities to strengthen supply resilience.
- Cyberattacks on food and logistics companies are listed alongside climate events and disease as a top-tier risk to the flow of food into the UK.
- Britain has no strong plan in place to absorb supply shocks that the watchdog says are becoming more frequent and more severe.
Britain's shelves look full. Under the surface, the system keeping them that way is more fragile than most people realise, and the NAO wants the government to say that plainly.
Published last year, the NAO's report told Defra it isn't doing enough. The warning, first reported by The Guardian, covers three overlapping threats: a changing climate that disrupts harvests and disease outbreaks, plus cyberattacks on the companies that move food from farms to shops.
What does a cyberattack have to do with your weekly shop?
More than most people expect. Modern food supply chains run on software. Factories, warehouses, and port operators all rely on computer systems to manage orders, track refrigerated lorries, and coordinate deliveries. A ransomware attack, where criminals or hostile states lock a company's files until a payment is made, can freeze a supply chain just as surely as a flood.
This isn't theoretical. In 2021, JBS Foods, one of the world's largest meat processors, paid roughly $11 million in ransom after criminals used ransomware to shut down plants across the US and Australia. Britain isn't immune to the same class of attack landing on its own food sector. Our 2 September report on the UK's new cybersecurity law noted that attacks on supply chains are growing more frequent, and food logistics sits squarely in that frame.
The failure mode is straightforward. A ransomware attack lands on a logistics provider. Deliveries stall. Supermarkets can't restock fast enough. Prices spike or shelves go bare in specific categories. Those who feel it first are the ones with the least flexibility to absorb it.
Should ordinary people be worried?
Not panicked. Aware. This is a planning warning, not a crisis alert. The concern is that a serious enough shock, whether a heatwave crushing European harvests or a cyberattack disabling a major distributor, could hit a system with no real buffer.
The gap isn't in the food itself; it's in the planning. Defra knows the risks. The watchdog's point is that knowing isn't the same as preparing. Closer coordination with the businesses and communities that actually run the food system is what the NAO is calling for.
If you want to do something sensible: keep a basic household stock of staples. Nothing extreme. A few extra tins and dried goods means a short disruption doesn't become your emergency.
When the post-mortem eventually gets written, one line will be easy to fill in: the warnings were there, in writing, from the watchdog.
