Protecting Retail Operations Starts with Knowing Who Can Access Your Equipment
Recent cyber incidents affecting supermarket refrigeration systems across Europe, including Ireland, have highlighted an important vulnerability for retailers: the security of the equipment and operational technology that keeps stores running.
On 2 November 2026, refrigeration systems in 13 supermarket stores in Ireland were affected by a cyber incident. Similar disruptions were reported by retailers in several other European countries, with some refrigeration systems experiencing changes to their operating temperatures. The Irish incident was resolved, but it brought the potential consequences of compromised connected equipment into sharp focus.
For retailers, the implications extend beyond IT systems and customer information. Refrigeration, heating, ventilation, building management, energy monitoring and other connected systems all play a role in keeping stores operational. As more equipment becomes connected and remotely accessible, retailers need to consider an important question:
Who has access to your equipment, how is that access controlled, and can you see when it is being used?
Modern retail environments rely on a growing range of connected equipment and control systems. These technologies help businesses monitor performance, manage energy consumption, maintain environmental conditions and oversee operations across multiple locations. Remote access can make it easier for engineers, maintenance providers and technical teams to diagnose issues, configure equipment and provide support without always needing to attend a site.
However, every remote connection needs to be considered as part of the organisation’s wider cybersecurity approach.
If access arrangements are poorly managed, businesses may have limited visibility over who can connect to equipment, which systems they can access or whether permissions remain appropriate when contractors, employees or service providers change.
Potential weaknesses can include:
- Shared usernames and passwords across multiple users or locations.
- Remote connections that remain active when they are no longer required.
- Third-party access without clearly defined permissions.
- Limited visibility of who has accessed equipment and when.
- Connected devices exposed through poorly secured network arrangements.
- Insufficient separation between business IT networks and operational technology.
These issues can increase the risk of unauthorised access, operational disruption and difficulty investigating suspicious activity.
Why Access Control Matters in Retail Environments
Controlling access is a fundamental part of protecting connected equipment.
Retailers may work with several external maintenance providers, refrigeration specialists, facilities management teams and equipment manufacturers. Each may need access to particular systems to carry out their responsibilities, but not everyone needs access to everything.
A more controlled approach allows businesses to manage access according to the individual, their role and the work they need to perform. This can include:
- Individual user access
Where supported, users should have their own identifiable access credentials rather than relying on shared logins. This helps establish accountability and makes it easier to review access activity.
- Defined access permissions
Access should be limited to the equipment and systems required for a person’s role. An engineer responsible for refrigeration equipment, for example, may not need access to other operational systems across the store.
- Controlled remote connections
Remote access should be established through secure, managed connections rather than leaving equipment directly accessible from the public internet. Connections should be authorised, appropriately protected and disabled when no longer required.
- Access visibility and accountability
Businesses should be able to understand who has access, review connection activity and remove permissions when they are no longer needed. Logging and monitoring can help support investigation and security reviews.
- Centralised management across locations
For retailers operating multiple stores, a consistent approach to access management can help reduce reliance on different arrangements at individual sites and provide greater oversight of connected equipment.
Protecting Operational Technology, Not Just IT Systems
Cybersecurity conversations often focus on computers, email systems, customer databases and business applications. However, operational technology (OT) deserves equal attention. OT refers to the hardware and software used to monitor, control and manage physical equipment and industrial processes. In a retail environment, this may include:
- Refrigeration and freezer control systems.
- Heating, ventilation and air conditioning (HVAC).
- Building management systems.
- Energy monitoring equipment.
- Environmental monitoring systems.
- Industrial control panels and connected machinery.
A security issue affecting these systems can have direct operational consequences. It may disrupt equipment performance, affect temperature-controlled storage, interrupt normal store operations or require equipment to be inspected and restored. This is why OT security needs to be considered alongside wider IT cybersecurity policies.
A key part of this approach is understanding how equipment is connected, which systems communicate with one another and where remote access is permitted.
Network design, segmentation, secure connectivity, user permissions and ongoing monitoring all have a role to play.
How BONNER Helps Retailers Manage Access to Connected Equipment
BONNER works with businesses to provide industrial connectivity and remote-access solutions that help customers manage how their equipment and systems are accessed. Our approach combines the relevant hardware, software and networking capabilities to provide a more controlled way of connecting to operational equipment. Rather than simply supplying a software application and leaving the customer to organise the supporting infrastructure, BONNER can help bring the solution together considering the equipment, connectivity and access requirements as part of the overall deployment.
Depending on the application, this can include:
- Controlled remote access
Providing managed connectivity to relevant equipment so authorised personnel can access the systems they need without relying on unrestricted remote connections.
- User and permission management
Helping businesses establish clearer control over who can access connected equipment and which systems they are permitted to reach, subject to the capabilities and configuration of the solution.
- Industrial networking
Providing the networking infrastructure needed to connect equipment and systems in a more structured way, with appropriate consideration for the separation of operational technology and wider business networks.
- Local and remote deployment options
Solutions can be designed for on-premises deployment using Industrial PCs and local networking infrastructure, or configured to support secure remote connectivity where required.
A joined-up hardware and software solution
BONNER considers the hardware, software and connectivity together, helping customers avoid the complexity of sourcing separate components and working out how they should operate as one solution.
The precise architecture and security controls depend on the equipment, site infrastructure, access requirements and the customer’s IT/OT policies.
A More Proactive Approach to Retail Cybersecurity
Recent incidents are a reminder that connected equipment needs to be included in wider cybersecurity planning.
Retailers should consider reviewing:
- Who currently has access? Identify employees, contractors, service providers and other third parties with remote access to equipment.
- What can they access? Review whether permissions are appropriate for each person’s role and responsibilities.
- How are connections secured? Check whether remote access is managed through secure, authorised connections rather than direct exposure to the internet.
- Are networks appropriately separated? Review how operational equipment connects to business IT networks and other systems.
- Can access be reviewed and withdrawn? Ensure permissions can be updated or removed when people, contracts or responsibilities change.
- Is activity visible? Consider whether connection logs and monitoring provide sufficient information to investigate unusual access.
These measures should form part of a wider OT cybersecurity strategy, supported by appropriate IT security controls, software updates, network management, backups and incident response procedures. No single access-control solution can eliminate cyber risk, but better visibility and management of connected equipment can help reduce unnecessary exposure and improve operational resilience.
Take Control of Access to Your Connected Equipment
Retail operations depend on equipment that needs to remain reliable, accessible and secure. As more systems become connected, controlling who can access them is an increasingly important part of protecting day-to-day operations. BONNER brings together industrial hardware, software, networking and connectivity expertise to help businesses develop more controlled access arrangements for their operational equipment.
Whether you operate a single facility or manage equipment across multiple retail locations, we can help you review your connectivity requirements and explore a solution suited to your environment.
Do you know who has remote access to your equipment?
Talk to BONNER about secure connectivity and access management for your operational systems.