Attack on Cooling Systems Threatens French Blood Plasma Storage via Third-Party Maintenance Provider
Between November 1-2, 2026, attackers compromised refrigeration control systems supplied by Coolworld, a maintenance vendor for the French Blood Establishment (EFS), which manages blood and plasma collection, storage and distribution in France. The intruders reprogrammed freezer temperature settings from -30°C to 110°C, threatening frozen plasma stocks used in transfusions and surgeries. The French Ministry of Health stated the incident caused no major operational impact, as the temperature changes were detected and corrected quickly; the number of affected facilities, outage duration, actual temperatures reached, and whether any blood stock was discarded remain undisclosed. The attack did not directly breach medical facilities but exploited third-party maintenance infrastructure that manages refrigeration across multiple clients, illustrating a supply-chain risk pattern. It follows similar attacks on supermarket freezers in Europe weeks earlier and warnings from ANSSI director Vincent Strubel about refrigeration infrastructure as a target.
Detalhes técnicos
According to the site Cyberattaque (cited by Cyber Security News), attackers did not target EFS directly but compromised the third-party maintenance systems operated by Coolworld that control freezer temperatures, allowing them to alter setpoints remotely across potentially multiple client environments.
Remediação
No specific remediation guidance was disclosed. UK NCSC chief Richard Horne, presenting the State of the Cyber Nation report, separately warned of fragile infrastructure across electricity distribution, water/dam controls, industrial production lines, and refrigeration controls, describing the UK's cyber posture as a "digital Leaning Tower of Pisa" and warning of a potential unprecedented rise in incidents.
Linha do tempo
-
Attack on Cooling Systems Threatens French Blood Plasma Storage via Third-Party Maintenance Provider
ler a análise desta fonte ocultar
Between November 1-2, 2026, attackers compromised refrigeration control systems supplied by Coolworld, a maintenance vendor for the French Blood Establishment (EFS), which manages blood and plasma collection, storage and distribution in France. The intruders reprogrammed freezer temperature settings from -30°C to 110°C, threatening frozen plasma stocks used in transfusions and surgeries. The French Ministry of Health stated the incident caused no major operational impact, as the temperature changes were detected and corrected quickly; the number of affected facilities, outage duration, actual temperatures reached, and whether any blood stock was discarded remain undisclosed. The attack did not directly breach medical facilities but exploited third-party maintenance infrastructure that manages refrigeration across multiple clients, illustrating a supply-chain risk pattern. It follows similar attacks on supermarket freezers in Europe weeks earlier and warnings from ANSSI director Vincent Strubel about refrigeration infrastructure as a target.
Technical Details
According to the site Cyberattaque (cited by Cyber Security News), attackers did not target EFS directly but compromised the third-party maintenance systems operated by Coolworld that control freezer temperatures, allowing them to alter setpoints remotely across potentially multiple client environments.
Remediation
No specific remediation guidance was disclosed. UK NCSC chief Richard Horne, presenting the State of the Cyber Nation report, separately warned of fragile infrastructure across electricity distribution, water/dam controls, industrial production lines, and refrigeration controls, describing the UK's cyber posture as a "digital Leaning Tower of Pisa" and warning of a potential unprecedented rise in incidents.