A cyberattack was launched against a contractor of the French Blood Establishment (Efs) in the night of November 1-2, 2026, affecting the command systems of cold storage rooms installed on three sites of the organization. The hackers modified the temperature and defrosting settings of these installations remotely. According to information released by Efs on November 3, the attack could have had serious consequences for the conservation of blood products.
The cold storage rooms, normally maintained at around -30°C, received instructions that could have reached 110°C. These installations contained, among other things, bags of plasma intended for blood transfusions and others reserved for the manufacture of medicines. These products are particularly sensitive to temperature variations and require strict conservation conditions. The incident was detected during the night by a technician on duty who noticed an abnormal rise in temperature.
The surveillance and alarm systems also made it possible to detect anomalies and trigger the necessary safety measures. According to the French Blood Establishment, the products concerned were secured or transferred to other installations. The organization ensures that no loss of blood products was recorded and that no health consequences were identified. The blood collection and distribution activities continue normally.
The cyberattack did not directly target Efs, but one of its contractors, the company Coolworld, responsible for providing and maintaining certain refrigeration equipment. The competent authorities, including the National Agency for the Security of Information Systems (Anssi), are associated with the investigations. This incident highlights the vulnerability of essential equipment for the conservation of blood products in France.
The attack comes after a series of cyberattacks targeting the refrigeration installations of supermarkets. The French Blood Establishment emphasizes that the situation is under control and that no disruption of blood supply has been observed. An investigation is underway to determine the origin of the attack and to identify those responsible.
This incident highlights the importance of securing computer systems and protecting sensitive data, particularly in the health sector. The French Blood Establishment and its contractors are taking measures to strengthen the security of their systems and prevent future attacks. The incident also underscores the need for increased vigilance and cooperation between public and private entities to combat cybercrime.
The French authorities are taking the incident seriously and are working to identify those responsible and to prevent similar attacks in the future. The incident has not had a significant impact on the blood supply, but it highlights the potential risks associated with cyberattacks on critical infrastructure.
Key points
- A cyberattack targeted the cold storage facilities of a French Blood Establishment's contractor, potentially disrupting blood product conservation.
- The attack was detected and contained, with no loss of blood products recorded and no health consequences identified.
- The incident highlights the vulnerability of essential equipment for the conservation of blood products in France and the need for increased vigilance and cooperation to combat cybercrime.
