Attackers Hacked French Blood Bank Fridges to Spike Temperatures
EFS said alarms caught the temperature spike before any blood products were damaged, though the full scope of the breach remains under review.
By Julia Novak ·
Staff at three French blood banks reacted on 4 November after cyber attackers remotely altered refrigeration settings to push temperatures toward extreme highs. The French Blood Establishment, or EFS, confirmed the intrusion targeted a service provider rather than its own internal systems. Monitoring alarms triggered immediately, allowing employees to intervene before the cold room conditions compromised the stored inventory.
EFS reported that no blood products were lost and that no health consequences had been identified for patients or donors. The organization stated that specific temperature and defrost thresholds were raised to very high levels during the incident. While EFS declined to release the exact temperatures reached inside the equipment, it noted that only a limited number of sites experienced the disruption.
As a precautionary measure, personnel secured or transferred all plasma bags and samples held in the affected units. These stocks include plasma used for direct transfusions and plasma utilized in the manufacture of pharmaceuticals. EFS said it was awaiting further technical data from the service provider to determine the complete extent of the digital breach.
The blood agency has since intensified its checks on the operation and temperature stability of all refrigeration equipment across its network. It confirmed that blood collection and distribution activities continued without interruption. EFS teams are coordinating with the French National Cybersecurity Agency, ANSSI, and the Ministry of Health to investigate the incident.
Authorities have not yet identified the origin of the attack or the responsible party. The incident follows recent cyber disruptions in Britain's meat processing sector and supermarkets in various European countries, where compromised cooling units reportedly warmed up and spoiled food worth millions of dollars.
The event occurred one day after Britain's National Cyber Security Centre, or NCSC, issued a warning on 3 November regarding artificial intelligence in cyber threats. The NCSC assessed that AI is enabling attackers to operate on an industrial scale and predicted the technology would likely be used against critical national infrastructure in Britain by 2028.
In a separate assessment, the NCSC described China as the UK's most sophisticated and sustained cyber challenge. The agency said China was likely to use AI to advance its geopolitical objectives within that same timeframe.
