3rd November 2026
British supermarkets are increasingly replacing traditional paper price labels with electronic displays. The technology promises greater efficiency, fewer pricing mistakes and the ability to change thousands of prices within minutes.
But as supermarkets become more dependent on connected technology, another potential vulnerability is emerging. Could hackers manipulate prices and leave shoppers enjoying bargains that were never intended?
It might sound like an unlikely scenario, but it raises some important questions about the security of Britain's increasingly automated food retail industry.
Tesco leads a major expansion
Tesco announced in June 2026 that it was planning to introduce electronic shelf labels across approximately 3,000 UK stores over the following two years. It has selected Chinese technology company Hanshow as its supplier.
Other retailers, including Asda, Lidl, Sainsbury's, Morrisons, Co-op and Waitrose, have also been introducing or trialling electronic shelf labels.
The advantages for supermarkets are obvious. Instead of employees spending hours replacing paper labels whenever prices change, a central computer system can update electronic displays across an entire store, or potentially many stores, almost immediately.
It also makes it easier to introduce promotions, change prices on products approaching their sell-by dates and ensure that shelf displays are consistent with central pricing systems.
However, the technology creates another potential entry point for cybercriminals.
What if hackers started reducing prices?
Consider a hypothetical situation.
A hacker gains unauthorised access to a supermarket's electronic shelf-label system. Rather than immediately demanding a ransom or disrupting the entire operation, they begin making small changes to selected prices.
A product costing £2 might suddenly display £1.80. Another costing £5 might show £4.50.
Individually, these changes might look like ordinary promotions or temporary price reductions. But if thousands of products were affected, the financial consequences could be considerable.
There might be several possible motives.
One could be straightforward financial disruption, forcing the supermarket to absorb losses or spend considerable time checking prices.
Another could be reputational damage. Customers discovering that prices displayed on shelves were unreliable might lose confidence in the retailer.
A more sophisticated attack could involve changing prices in selected stores, making it harder to identify a common problem.
There is also the possibility of hackers increasing prices, creating confusion and potentially leaving customers paying more than they expected.
Importantly, these are potential attack scenarios rather than evidence that such an incident has happened to a British supermarket.
Would the checkout recognise the changes?
One important question is whether changing an electronic shelf label would automatically change the price charged at the checkout.
Not necessarily.
Electronic shelf labels and checkout systems can operate as separate parts of a retailer's wider pricing infrastructure. A change to a shelf display does not automatically mean that the central till database has also been altered.
That separation can provide an important safeguard.
However, it could create another problem. Imagine a customer picking up several products displaying reduced prices, only to discover at the checkout that the till is charging the original amounts.
That would cause frustration, queues and disputes between customers and supermarket staff.
Retailers therefore need systems that regularly check that the price displayed on the shelf matches the price held in the checkout system.
What protection should supermarkets have?
Electronic shelf labels should be treated as part of a supermarket's essential computer infrastructure, rather than simply another piece of shop equipment.
There are several safeguards retailers should consider.
Access to pricing systems should be restricted to authorised employees and properly authenticated systems. Communications between central computers and shelf labels should be protected against unauthorised changes.
Unusual price movements should trigger automatic alerts. For example, if hundreds of unrelated products suddenly become cheaper within a short period, the system should recognise that something unusual might be happening.
Supermarkets should also maintain records showing when prices were changed, which system authorised the changes and whether the changes were subsequently checked.
Most importantly, electronic shelf-label networks should be separated from other critical systems, including payments, stock management and warehouse operations.
A weakness in one system should not provide an easy route into everything else.
What does consumer protection law say?
There is also a legal dimension.
The Competition and Markets Authority published updated price transparency guidance in January 2026, explaining businesses' responsibilities for displaying clear and accurate prices.
Under consumer protection rules, prices must provide customers with the information they need to make informed purchasing decisions.
A supermarket cannot simply ignore misleading pricing practices because the displayed price was generated electronically.
There is, however, an important distinction between a displayed price and a completed sale. In ordinary shop transactions, the contract is generally formed at the checkout, meaning a retailer is not automatically obliged to sell an item at every incorrectly displayed price. The circumstances and consumer protection rules still matter.
Another vulnerability in Britain's food system?
The introduction of electronic shelf labels is part of a much wider transformation in supermarket operations.
Refrigeration, stock control, distribution centres, ordering systems, warehouse automation and payment facilities are increasingly connected.
Recent reports of cybercriminals interfering with refrigeration systems at European supermarkets, together with the discovery that more than 800 UK retail refrigeration systems had internet-accessible login pages, demonstrate why retailers need to examine the security of equipment that might previously have been regarded as ordinary shop machinery.
There is no evidence that British supermarkets have suffered the sort of deliberate electronic shelf-price manipulation described here. But the possibility deserves attention before an incident occurs.
Supermarkets have good reasons to embrace technology. It can reduce costs, improve efficiency and make shopping more convenient.
However, the more dependent retailers become on computer-controlled operations, the greater the importance of protecting those systems.
Perhaps the question worth asking Tesco and its competitors is quite simple: when customers look at an electronic price label, how confident can they be that the price is genuine, accurate and has not been altered by somebody who should never have had access to the system?
A few unexpected bargains might initially delight shoppers. But if hackers can interfere with the prices of thousands of products, the consequences could be considerably more expensive for retailers and consumers alike.