A cyberattack on November 2 altered refrigeration controls at three sites run by France’s national blood service, the Établissement français du sang (EFS). The affected cold rooms stored plasma and blood samples. Monitoring systems and staff intervention helped prevent damage, and EFS reported no compromised products or samples.
1
4
The widely reported 110°C was an altered target setting—not evidence that the plasma or the storage rooms reached that temperature. Reporting says the actual temperature reached was not established.
14
What happened to the refrigeration controls
EFS said temperature and defrost thresholds at three of its cold-storage sites were raised to “extremely high levels.” French media reported that settings normally around −30°C had been changed to a target of 110°C.
1 The rooms held plasma, including plasma intended for transfusions, as well as blood samples.
4
24
The attack reached systems used to monitor and control refrigeration equipment supplied to EFS. EFS said it was not the direct target; the incident involved a refrigeration supplier.
4 That distinction matters: the reported access was through equipment and controls associated with a vendor, not a direct breach of EFS’s main systems.
4
13
How alarms and staff response limited the impact
Monitoring and alarm systems detected the abnormal settings, allowing staff to act before blood products or samples were damaged, EFS said.
1
4 Reporting also says an overnight technician noticed the temperature rising and that emergency teams intervened.
3
EFS reported that no blood products or samples were compromised and that no health consequences had been identified.
1 Separate reporting said the incident did not affect hospital supplies or transfusion services.
3 The available sources do not establish every operational detail, including whether collection and distribution continued without interruption.
What Coolworld said—and what is still unknown
Coolworld said it was aware of the incident. In a statement reported by the Associated Press, the company said the vulnerability being reported in the media related to a component from a third-party supplier and was outside Coolworld’s direct control.
45
EFS identified three affected sites, but the available reporting does not establish the precise number of affected refrigeration units.
1 The sources also do not provide enough detail to confirm the attack method, the full technical scope, or when all affected equipment returned to service. Those limits make it important to distinguish confirmed service impact from unanswered questions about the intrusion.
Part of a wider wave of refrigeration incidents
The blood-storage attack came amid a broader series of incidents affecting commercial refrigeration systems in Europe. The European Commission and the EU Agency for Cybersecurity (ENISA) said that several such systems and similar devices in EU member states had been affected since October 11, including in a new wave on November 1–2.
44
Supermarket refrigeration incidents during the November wave led some retailers to discard food after temperatures rose.
12
34 But the available reporting does not establish that the EFS incident and the supermarket attacks were carried out by the same actor or as part of one coordinated campaign; reporting on the supermarket incidents said it was unclear whether they were coordinated or targeted individually.
36 Responsibility for the EFS attack is likewise not established in the cited material.
The EFS incident is a reminder that cyber risk can reach physical systems through equipment and services supplied by third parties. In this case, altered refrigeration controls put medical stock at risk, even though alarms and staff action prevented reported product losses.
4
13