Hackers Target French Blood Banks in Escalating European Cold Chain Cyberattacks
French blood service EFS reports hackers attempted to raise freezer temperatures to 110C in an overnight attack on November 1-2. Alarms triggered rapid intervention, preventing damage to vital plasma and blood products. This incident follows a widespread wave of similar cyberattacks targeting supermarket refrigeration systems across at least ten European nations, highlighting vulnerabilities in critical medical and food infrastructure.
Key points
- The French Blood Establishment (EFS), which supplies over 1,900 hospitals, reported a cyberattack on its cold storage systems overnight between November 1 and 2.
- Hackers attempted to manipulate control systems to raise freezer temperatures from -30C to 110C, threatening the integrity of frozen plasma and blood products.
- Automated alarm systems detected the anomaly quickly, allowing technicians to intervene before any medical supplies were compromised or destroyed.
- The attack targets Coolworld, a supplier for the EFS, and occurs amid a broader campaign affecting refrigeration systems in supermarkets across Europe.
- Similar incidents have been reported in Italy, Germany, Romania, the UK, Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands, and Sweden.
- The French Ministry of Health confirmed no serious operational consequences resulted from the breach, though it marks an escalation toward medical infrastructure.
Escalation of Cold Chain Cyber Threats
A significant cyberattack has targeted France's national blood service, marking a concerning shift in recent malicious operations that have primarily focused on the food retail sector. The French Blood Establishment (EFS), the public operator responsible for collecting, testing, and distributing blood, plasma, and platelets to more than 1,900 hospitals across the country, confirmed that hackers accessed its control systems overnight between November 1 and November 2. The attack represents an apparent escalation in a wave of cyber incidents disrupting cold chain infrastructure throughout Europe.
According to the EFS, the threat actors managed to manipulate the settings of refrigeration units, specifically targeting cold stores stocking vital blood products. The attackers attempted to raise the temperature and defrosting thresholds to extremely high levels. Cybersecurity reports indicate that the hackers programmed the freezers to increase temperatures from -30C (-22F) to as high as 110C (230F). While it remains unconfirmed whether the units actually reached these extreme temperatures, the intent to destroy temperature-sensitive medical supplies was clear.
The incident involved Coolworld, a company that supplies the French Blood Establishment. The EFS emphasized that its alarm systems functioned correctly, allowing technicians to detect the unauthorized changes and intervene rapidly. Consequently, no blood or plasma products had to be destroyed, and the French Ministry of Health stated that the cyberattack did not result in any serious operational consequences for patient care. The service supports more than one million patients annually, making the preservation of these supplies critical for essential surgeries and medical operations.
This breach is part of a broader, coordinated pattern of attacks affecting refrigeration systems across multiple European nations. In the days preceding the attack on French blood banks, retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands, and Sweden reported problems with their cooling systems. The disruption spread rapidly, with supermarkets in Italy, Germany, Romania, and the UK facing similar issues shortly thereafter. In some cases, temperatures in supermarket freezers soared to 50C (122F), causing millions of euros in food damage.
France has been particularly affected by this campaign. In a previous wave of attacks last month, hackers seized control of cooling units in as many as 700 supermarkets within the country. The recent attack on the blood service suggests that threat actors are expanding their targets beyond commercial food storage to include critical medical infrastructure. The EFS noted that the attack occurred overnight, exploiting the window when manual monitoring might be reduced.
The motivation behind these attacks remains under investigation, but the timing and method suggest a strategic effort to disrupt essential services. The ability to remotely manipulate industrial control systems in cold storage facilities highlights significant vulnerabilities in the digital infrastructure supporting both food security and public health. The incident has raised alarms among cybersecurity experts and government officials regarding the resilience of critical national infrastructure against sophisticated cyber threats.
Key takeaways
- French Blood Establishment (EFS) confirmed hackers attempted to raise freezer temperatures to 110C during an overnight attack on November 1-2.
- Alarms triggered immediate technician intervention, preventing any damage to vital blood and plasma products.
- The attack targets Coolworld, a supplier for the EFS, and follows a widespread campaign affecting supermarkets across at least ten European countries.
- The French Ministry of Health reported no serious operational consequences, but the incident marks an escalation toward medical infrastructure.
- Similar refrigeration system failures have been reported in Italy, Germany, Romania, the UK, Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands, and Sweden.
- The incident highlights growing vulnerabilities in cold chain infrastructure, shifting from food retail to critical medical supply chains.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.
