Kaspersky research shows how cyberattacks on warehouse management systems can cause physical delays, lost inventory and supply chain chaos.
Key points
- Warehouse management systems link digital data to physical actions like conveyor movement and gate assignments.
- Compromising these systems can cause packages to be sent to wrong locations or inventory records to become inaccurate.
- Recent incidents at Morrisons, UNFI and CEVA Logistics demonstrate the real-world impact of such cyber disruptions.
Kaspersky Securelist published research detailing how cyberattacks on warehouse management systems create physical supply chain disruptions. The report explains that modern warehouses rely on interconnected digital systems that control physical operations, making them vulnerable to data manipulation.
What happened
Kaspersky experts analyzed the security risks within modern warehouse environments, focusing on how initial access vectors can compromise operations. They traced the journey of a single order through eight stages, from unloading to final delivery, to identify vulnerabilities. The research highlights that errors in digital records have immediate physical consequences, such as misplaced goods or stopped conveyors.
Recent examples illustrate this risk. An outage affected warehouse management systems at grocery giant Morrisons. United Natural Foods Inc confirmed unauthorized activity impacted order fulfillment in its 2025 annual report. Reports also emerged that a cyberattack disrupted eight CEVA Logistics warehouses across Europe and exposed customer delivery data.
Why it matters
A modern warehouse is a hybrid system where digital commands trigger physical actions. If an attacker alters data in the warehouse management system, the physical operation follows those false instructions. For example, incorrect gate assignments can create traffic jams, while wrong inventory records lead to missing items. Teams usually monitor for discrepancies between digital records and physical stock. Check whether systems validate data inputs at every stage. Ensure that physical controls cannot be bypassed by corrupted digital signals. This alignment prevents small data errors from becoming large operational failures.
The fix
- Monitor warehouse management systems for unusual data changes or command patterns.
- Verify that digital inventory records match physical stock counts regularly.
- Restrict access to systems that control physical equipment like conveyors and gates.
- Review logs from portable data terminals and thermal printers for anomalies.
Why it matters
Warehouse operations depend on the accuracy of digital information guiding physical tasks. When systems are compromised, the resulting data errors can halt production or misdirect shipments. Security teams should focus on protecting the integrity of data at each stage of the order process. This includes validating inputs from scanners and ensuring that automated systems only act on verified commands. Regular audits of system access and data flow help identify potential weaknesses before they cause disruptions.
Background: Supply chain attacks
Verify code signatures and hash values before installing any update. Monitor for unexpected outbound traffic or permission requests. If anomalies appear, isolate the system immediately and revert to a known good state. Treat third-party updates as untrusted until proven otherwise.
Read the full guide: Supply Chain Attack Warning Signs and Response Steps
What to do and how to stay safe: Kaspersky
- Review access controls for warehouse management systems to ensure only authorized personnel can make changes.
- Implement monitoring tools to detect unusual activity in inventory records or order processing.
- Train staff to recognize and report discrepancies between digital data and physical goods.
- Develop incident response plans specifically for warehouse system outages or data breaches.
Step-by-step guide: What is password policies and how they protect systems
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How can a cyberattack affect physical warehouse operations?
By altering digital data in warehouse management systems, attackers can cause physical equipment to malfunction or misdirect shipments.
Which companies have experienced warehouse cyber disruptions?
Morrisons, United Natural Foods Inc and CEVA Logistics have all reported incidents affecting their warehouse operations.
What are the main stages of a warehouse order process?
The process includes unloading, receiving, putaway, storage, picking, packing, shipping and final delivery.
