After supermarkets, cyberattack hits French blood service
In France, a cyberattack on a refrigeration equipment supplier disrupted the operation of systems storing donor blood components. The attackers remotely changed the temperature settings of cold rooms at three facilities of the French Blood Service (Établissement français du sang, EFS). Thanks to timely intervention by staff, the medical products were preserved.
The incident, which occurred on the night of November 2, was reported by ZDNET, citing an EFS statement. The French Blood Service confirmed the incident on November 3.
The attack affected remote control systems for cold rooms at three EFS facilities. The attackers changed the temperature settings and defrost modes to extremely high values. These rooms stored donor blood samples, plasma for transfusion to patients, and raw materials for the production of medicinal products.
According to ZDNET, a technical employee on duty noticed the temperature increase thanks to monitoring and alarm systems. After detecting the intrusion, the affected equipment was disconnected or brought back under staff control, and some of the stocks were preemptively moved to other refrigeration units.
The French Blood Service stated that no sample or blood product was damaged. No threats to patient health were identified, and the collection, processing, and supply of blood components to medical facilities continued without interruption.
The direct target of the cyberattack was not EFS itself, but a company that ensures the operation of the refrigeration equipment. According to French media, the European supplier is Coolworld Rentals.
In a notification dated November 4, Coolworld confirmed the incident involving remote monitoring software for refrigeration systems. According to the company, the problem was related to a component from a third-party supplier outside its direct control. Coolworld stated that a limited number of units were affected and that the necessary response measures have already been taken.
The French Blood Service continues a technical investigation together with the National Agency for Cybersecurity of France (ANSSI) and the Ministry of Health. Monitoring of the refrigeration equipment's operation has been strengthened.
The incident occurred amid a new wave of cyberattacks on refrigeration systems in Europe. As previously reported by Kurs.com.ua, in early November similar intrusions were recorded in supermarkets in Belgium, Luxembourg, Sweden, Estonia, and Ireland.
In retail chains, hackers also remotely changed temperature settings and launched defrost modes. Due to disruption of storage conditions, some stores were forced to dispose of products and temporarily limit operations.
The case of the French blood service became one of the first confirmed incidents of the current wave that affected medical infrastructure rather than commercial enterprises.
At the same time, there is currently no confirmation that the attack on EFS and the incidents in European supermarkets were carried out by the same attackers. The perpetrators of the cyberattacks have not been identified, and the specific mechanism of compromise of the French blood service's equipment is still being determined.
