Cyberattack on French Blood Storage Systems Contained

The French Blood Establishment (EFS) said that several of its facilities were affected by a cybersecurity incident involving remotely altered refrigeration controls. Cold-storage units operated by external providers at three EFS sites held blood products and samples; attackers reportedly raised temperature and defrost thresholds to excessively high levels. The affected equipment was used to store blood products before delivery to healthcare facilities, samples for EFS biobanks, and frozen plasma used for transfusions and for manufacturing medicinal products. EFS said its monitoring and alarm systems detected the anomalies quickly. Depending on the circumstances, equipment was either brought under control without affecting its contents or taken offline, and samples were moved to other facilities. The organization reported that no blood products or samples were lost and that no health impact had been identified. It is coordinating with France’s National Cybersecurity Agency (ANSSI) and the Ministry of Health, while increasing equipment monitoring. The incident is part of a broader wave of attacks on refrigeration systems in Europe. Hundreds of supermarkets in France and other countries—including Belgium, Sweden and Finland—had fridges remotely hacked and temperatures raised, potentially spoiling food worth millions of euros. The French Health Ministry said the situation at EFS was under control and being closely monitored, and credited monitoring and alarm systems and immediate precautionary measures with preserving the safety of blood supplies.

A cyberattack targeting a supplier of refrigeration equipment affected three cold-storage sites operated by the French Blood Establishment (EFS), which stores plasma for transfusions and for the manufacture of medicines. On Monday, temperature and defrosting thresholds at the sites were raised to extremely high levels, authorities said. The EFS reported that monitoring and alarm systems quickly detected the unusual settings, allowing staff to respond before any blood products or samples were compromised. Plasma products were either transferred or secured, and the EFS said there were no health consequences and no products were lost. Blood collection and distribution continued without interruption, so services to patients at hospitals and other healthcare facilities were maintained. France’s national cybersecurity agency and the Health Ministry are investigating the incident. The attack followed reports that supermarket refrigeration systems in several European countries had been remotely taken over, warming fridges and freezers and causing large quantities of food to spoil, with losses of millions of euros. The article presents the blood-bank incident as a successfully contained threat to critical health-related storage, while noting that the investigation is ongoing.

A cyberattack targeting a refrigeration service provider affected monitoring and control systems at three French sites storing donated blood products, the French Blood Establishment (EFS) said Wednesday. The attack occurred Monday. According to French magazine Le Canard Enchaîné, which first reported the incident, the cold stores were programmed to reach 110°C instead of -30°C. The facilities’ alarm and monitoring systems helped avert harm: EFS reported no loss of blood products and no health impact. Blood collection and distribution continued without interruption, maintaining supplies for hospitals and other healthcare facilities. The incident is part of a wider wave of suspected cyberattacks on refrigeration systems in Europe. Recent attacks on supermarket refrigerators caused disruption, prompting concern about the security of connected infrastructure and the food supply. On Wednesday, French cooperative bank Crédit Mutuel Arkéa also reported a similar attack that enabled fraudulent transactions. The bank said the incident had been contained, operations were resuming, and clients’ money and assets were unaffected. Separately, Dutch retail conglomerate Ahold Delhaize said a cyberattack last month affecting stores in the Netherlands, Belgium and the United States could reduce its fourth-quarter sales by as much as €250 million ($281 million), according to AFP. French Health Minister Stéphanie Rist’s office said safety systems protected the blood supplies. The health ministry and France’s national cybersecurity agency opened investigations into the blood-storage incident; authorities had not identified who was responsible. Despite the apparent disruption, officials said patient services and blood-product distribution remained uninterrupted.

A cyberattack affected cold-storage monitoring and control systems at three regional facilities of the French Blood Establishment (EFS) overnight from Nov. 1 to 2. France’s health ministry said the incident did not affect blood supplies. EFS spokesperson Charley Dubois explained that staff received alerts, worked around the clock, and moved blood to refrigerators that were not connected to the affected systems, allowing operations to continue safely. The incident occurred at roughly the same time as attacks on supermarket refrigerators in eight European countries, from Sweden to Belgium. Retailers were forced to discard large quantities of food. The attacks recalled a separate incident in France three weeks earlier, when hackers reportedly took control of cooling units at hundreds of supermarkets, resulting in fires and food losses. By Nov. 4, the health ministry said the situation at the blood-bank facilities was under control and remote access to the affected refrigerators had been disabled. Investigators are examining how the attack was carried out, which equipment may have been affected, and when the systems can safely return to service. The incidents have heightened concerns in the European Union about vulnerabilities in connected infrastructure, particularly as security tensions have grown since Russia’s 2022 invasion of Ukraine. The article reports no confirmed cause or attribution for the attacks and says investigations remain ongoing.

A cyberattack targeted refrigeration equipment at three French plasma-storage sites, raising temperature and defrosting thresholds to levels that could have endangered stored blood products and samples. The affected equipment was supplied to the French Blood Establishment (EFS), the organization responsible for France’s blood collection and distribution network. EFS said monitoring and alarm systems detected the unusual changes quickly, enabling staff to intervene before any products were damaged. No blood products were lost, and authorities reported no health consequences. As a precaution, products and samples in the affected equipment were secured or transferred to other facilities. The sites stored plasma for transfusions as well as plasma used to manufacture medicines. EFS said the incident affected only a limited number of sites, but further technical information from its service provider is needed to determine the full extent. It has not identified the origin of the attack or those responsible. The incident comes amid a broader campaign targeting refrigeration systems in Europe. Supermarkets in several countries have reported food spoilage after attackers remotely tampered with refrigerators and freezers, causing losses worth millions of euros. Despite the attack, EFS said its collection and distribution operations continued without interruption, maintaining supplies to hospitals and other healthcare facilities. The organization has increased monitoring of refrigeration equipment across its network. France’s national cybersecurity agency, ANSSI, and the health ministry are investigating.