A cyberattack occurred on the night of November 1-2, 2026, affecting three sites of the Établissement français du sang (EFS) in France. The attack disrupted the cold storage facilities, which house plasma supplies for transfusions and medication production, as well as blood samples. The EFS confirmed the incident on November 3, stating that its own systems were not compromised.
The hackers gained access to the remote monitoring system of a refrigeration equipment provider, a type of equipment previously targeted in October. An attack on the Danish manufacturer Danfoss had caused unexpected defrosting in several French supermarkets. The affected EFS facilities stored plasma supplies and blood samples, which are crucial for medical treatments.
The cyberattack caused temperature and defrosting thresholds to be set to very high levels, potentially compromising the plasma supplies. However, the EFS reported that its teams were able to safeguard the affected supplies, and no products were lost. The incident highlights the vulnerability of critical infrastructure to cyberattacks.
The EFS has since announced that it will enhance surveillance of its equipment's functioning and temperatures. The French national cybersecurity center, CERT-FR, had previously recommended disconnecting internet access from refrigeration equipment that no longer receives security updates. This recommendation was made following similar incidents in October.
The cyberattack on EFS facilities is not an isolated incident. Refrigeration equipment in stores experienced similar issues in Belgium, Luxembourg, and Sweden. The incidents underscore the need for robust cybersecurity measures to protect critical infrastructure, including healthcare and food storage facilities.
The EFS has assured that it is taking steps to prevent future incidents. The incident highlights the importance of securing remote monitoring systems and ensuring that equipment providers have adequate security measures in place. The French authorities are likely to investigate the incident and take measures to prevent similar attacks in the future.
The cyberattack on EFS facilities demonstrates the potential consequences of a successful attack on critical infrastructure. The incident emphasizes the need for organizations to prioritize cybersecurity and implement robust measures to protect their systems and equipment.
Key points
- The cyberattack on EFS facilities caused temperature and defrosting thresholds to be set to very high levels, potentially compromising plasma supplies.
- No plasma supplies were lost due to the swift action of EFS teams.
- The incident highlights the vulnerability of critical infrastructure to cyberattacks and the need for robust cybersecurity measures.
