• Swindon & Wiltshire M&A, deals
• Wednesday November 4 2026

Bristol refrigeration firm sold as cyber risk puts supermarket cold chains in focus

Bristol-based Space Engineering has been sold to German refrigeration and ventilation group bluu unit, in a deal that gives the buyer its first UK platform — and puts the security of Britain’s supermarket cold chains under sharper scrutiny.

Space Engineering, advised by FRP Corporate Finance’s Bristol team, is the UK’s largest manufacturer of CO2 refrigeration packs and supplies mechanical and electrical engineering services across refrigeration, heating, ventilation and air conditioning. Its customers include most of the UK’s leading supermarkets, making the business a strategic acquisition for a group seeking entry into the British market.

The transaction was led by FRP partner Tim Spooner, whose team prepared Space Engineering for sale, approached a selected group of buyers and managed negotiations through to completion. Space Engineering’s leadership has retained a minority stake and will stay with the business, providing continuity as bluu unit builds its UK presence.

“The combination of Space Engineering and bluu unit brings together two businesses at the forefront of delivering resilient and sustainable refrigeration infrastructure to one of the UK’s most essential industries,” Spooner said. “Deals like this demonstrate the depth of outstanding businesses across the South West and the continued appetite from buyers for high-quality regional companies.”

Dale Nouch, Space Engineering’s managing director, praised FRP for keeping the “fast-moving acquisition firmly on track” and delivering a “truly fantastic outcome”.

Cyber risk becomes a selling point

The deal lands as refrigeration systems emerge as an unexpected cybersecurity weak point. Following October attacks on refrigeration systems in France, supermarkets in Belgium, Luxembourg, Sweden and Ireland were compromised on 2 November.

David Andrews of Space Engineering said the vulnerability stemmed from insecure connections rather than a sophisticated hack. “The public IP addresses of these systems were able to be reached externally,” he said. “Technically, it is not a hack but a misconfiguration. The systems can be accessed through the internet.”

He described the incidents as a “wake-up call” for the sector and said Space offers secure remote VPN connections and enhanced intrusion prevention to reduce the risk of third-party “man in the middle” attacks.

“With the threat of AI being used as a tool for such attacks, this is an issue that will become more serious as the technology evolves to be able to infiltrate systems in the future,” Andrews said.