Warehouse Barcode Scanners Pose Cyber Threat To E-Commerce, Retail

Cybersecurity firm Kaspersky has warned that vulnerabilities in wireless barcode scanners could expose warehouse, retail and e-commerce networks to cyberattacks, raising concerns over the security of technology used in supply chain operations.

The warning followed a security assessment by Kaspersky researchers, who discovered that weaknesses in the communication between certain barcode scanners and their base stations could allow attackers to gain unauthorised access to connected computers.

The findings, presented at the Security Analyst Summit 2026 in Bali, identified a lack of authentication between a handheld scanner and its base station as a major security weakness. The base station is typically connected to a computer or another business system used to process inventory and warehouse operations.

According to the researchers, an attacker within wireless range could exploit the connection to inject keystrokes into a connected computer, potentially executing unauthorised commands without requiring any action from the worker using the device.

In a hypothetical attack scenario, a cybercriminal could obtain the Bluetooth address of a scanner’s base station by monitoring wireless traffic before establishing a connection and transmitting a malicious payload designed to simulate keyboard input.

The base station could then forward the commands to the connected computer, where they might be interpreted as legitimate user input. This could provide an initial entry point into the warehouse network and expose systems connected to the compromised computer.

Kaspersky said the attack pattern had been observed across devices from multiple vendors, while warning that the risks could extend beyond barcode scanners to other equipment used in warehouses, including portable data terminals and thermal printers.

Such breaches could potentially compromise warehouse management systems, which businesses rely on to coordinate inventory, order processing and other logistics activities. Disruptions to these systems could affect the movement of goods, order fulfilment and business operations.

Commenting on the findings, Sergey Sidorov, Head of Industrial Security Services at Kaspersky, said: “Modern retail and logistics are profoundly digital, from enterprise-wide management platforms down to every device in a worker’s hands.

“This pervasive connectivity means that any technology at any tier can become an entry point for a cyberattack capable of destabilising the entire ecosystem — as our research shows, even a single barcode scanner.

“The warehouse sector, and the broader retail industry, should treat cybersecurity as a top priority across every layer of their operations.”

The findings come as businesses increasingly rely on interconnected digital systems to manage storage, distribution and online orders. Kaspersky noted that global e-commerce sales had exceeded $6 trillion, making disruptions to supply chains a potential source of financial and reputational losses, hence, to reduce the risks, the researchers advised businesses to verify devices before connecting them to corporate networks, disable unused Bluetooth interfaces and enforce strong authentication mechanisms.

They also recommended separating warehouse networks to restrict unnecessary connections, promptly installing security updates on devices and warehouse management systems, and limiting user accounts to the minimum permissions required for their duties.

Additionally, organisations were advised to conduct regular security exercises to identify potential routes attackers could exploit, including scenarios involving insiders with legitimate access to business systems.

The findings highlight the need for businesses to consider the security of peripheral equipment alongside their main computer systems, as vulnerabilities in a single connected device could provide an entry point into wider corporate networks.