Hackers Alter Refrigeration Settings at French Blood Service, Plasma Saved by Alarms
Établissement français du sang (EFS), France's national blood service, disclosed that hackers tampered with refrigeration controls at three sites on the night of November 1–2, 2026, altering temperature and defrost thresholds on equipment managed through a third-party refrigeration supplier. Monitoring and alarm systems detected the anomalous changes, allowing staff to intervene—either regaining control of equipment or moving stored plasma and biological samples to alternate cold storage—before any products were damaged. Le Canard enchaîné, whose reporting was echoed by TF1, reported that settings normally near minus 30°C were reportedly changed to 110°C, though EFS confirmed only that thresholds were altered without validating that figure, noting it describes a programmed setpoint rather than an actual temperature reached. The supplier, later identified by media as Coolworld, confirmed a cybersecurity incident affecting a limited number of its refrigeration remote-monitoring units and attributed the underlying vulnerability to a third-party component outside its direct control. EFS said no health consequences occurred and no blood products were lost, and it is now working with ANSSI and the Health Ministry while investigators examine the intrusion vector and affected equipment.
Detalhes técnicos
The attack targeted refrigeration remote-monitoring software at facilities including sites in Bourgogne-Franche-Comté, manipulating temperature and defrost setpoints rather than directly damaging physical infrastructure. An on-duty technician detected the anomaly overnight, and EFS's independent alarm and monitoring systems flagged the deviation before stored plasma or samples were compromised. Coolworld has not disclosed the specific third-party component involved or the access method used by the attackers. The incident mirrors a pattern of refrigeration-system attacks affecting European supermarkets and UK food suppliers in recent months, including French supermarkets in October, where altered settings and disabled alerts led some retailers to discard food; investigators have not confirmed whether the same actors or access methods are responsible.
Remediação
EFS has strengthened equipment and temperature monitoring following the incident and is coordinating with ANSSI and the Health Ministry on the investigation. Security experts commenting on the incident emphasized that internet-connected devices capable of affecting human safety require strong authentication, access controls, and the same level of protection afforded to other critical operational technology.
Linha do tempo
-
Hackers Alter Refrigeration Settings at French Blood Service, Plasma Saved by Alarms
ler a análise desta fonte ocultar
Établissement français du sang (EFS), France's national blood service, disclosed that hackers tampered with refrigeration controls at three sites on the night of November 1–2, 2026, altering temperature and defrost thresholds on equipment managed through a third-party refrigeration supplier. Monitoring and alarm systems detected the anomalous changes, allowing staff to intervene—either regaining control of equipment or moving stored plasma and biological samples to alternate cold storage—before any products were damaged. Le Canard enchaîné, whose reporting was echoed by TF1, reported that settings normally near minus 30°C were reportedly changed to 110°C, though EFS confirmed only that thresholds were altered without validating that figure, noting it describes a programmed setpoint rather than an actual temperature reached. The supplier, later identified by media as Coolworld, confirmed a cybersecurity incident affecting a limited number of its refrigeration remote-monitoring units and attributed the underlying vulnerability to a third-party component outside its direct control. EFS said no health consequences occurred and no blood products were lost, and it is now working with ANSSI and the Health Ministry while investigators examine the intrusion vector and affected equipment.
Technical Details
The attack targeted refrigeration remote-monitoring software at facilities including sites in Bourgogne-Franche-Comté, manipulating temperature and defrost setpoints rather than directly damaging physical infrastructure. An on-duty technician detected the anomaly overnight, and EFS's independent alarm and monitoring systems flagged the deviation before stored plasma or samples were compromised. Coolworld has not disclosed the specific third-party component involved or the access method used by the attackers. The incident mirrors a pattern of refrigeration-system attacks affecting European supermarkets and UK food suppliers in recent months, including French supermarkets in October, where altered settings and disabled alerts led some retailers to discard food; investigators have not confirmed whether the same actors or access methods are responsible.
Remediation
EFS has strengthened equipment and temperature monitoring following the incident and is coordinating with ANSSI and the Health Ministry on the investigation. Security experts commenting on the incident emphasized that internet-connected devices capable of affecting human safety require strong authentication, access controls, and the same level of protection afforded to other critical operational technology.