An intrusion exposed critical systems without harming patients.
Paris, France
A cyberattack targeting refrigeration systems at three French blood storage facilities has raised concerns about the vulnerability of essential healthcare infrastructure to digital intrusion. Hackers manipulated temperature and defrosting controls connected to the French Blood Establishment (EFS), potentially endangering plasma reserved for transfusions and pharmaceutical production. Authorities confirmed that monitoring systems detected the abnormalities before any blood products or biological samples were damaged, preventing disruption to medical services.
The incident occurred overnight between November 1 and 2 and involved equipment managed by an external refrigeration provider rather than a direct intrusion into the blood service’s central information systems. According to EFS, the attackers changed temperature and defrost thresholds to exceptionally high settings, creating conditions that could have compromised temperature-sensitive medical materials. Technicians responded to automatic alerts, secured affected equipment and transferred vulnerable supplies to alternative storage facilities. The organization reported no patient injuries, no losses of blood products and no interruption to blood collection or distribution.
The attack exposed an increasingly important cybersecurity challenge: the connection between traditional industrial equipment and internet-accessible management platforms. Modern refrigeration systems frequently incorporate remote monitoring capabilities that allow operators to supervise temperatures, identify malfunctions and adjust equipment without being physically present. These functions improve operational efficiency but can introduce security weaknesses when access controls, software maintenance or supplier protections are insufficient. In healthcare environments, unauthorized changes to physical operating conditions can threaten essential supplies even without compromising patient records.
European refrigeration company Coolworld acknowledged a cybersecurity incident involving remote monitoring software used in its equipment. The company said a vulnerability associated with a third-party component had affected a limited number of its refrigeration units and that corrective measures were being implemented. It declined to discuss individual customer cases. Investigators have not publicly established the precise intrusion method or identified those responsible for the French blood storage incident.
The development follows a wider wave of cyberattacks against commercial refrigeration equipment across Europe. Supermarkets in several countries, including Sweden, Belgium and the Netherlands, experienced remotely manipulated cooling systems that forced retailers to discard substantial quantities of perishable food. Some installations reportedly received temperature settings approaching 50 degrees Celsius, demonstrating how unauthorized digital commands can generate immediate physical and financial consequences. Although the incidents share operational characteristics, authorities have not established that every attack was conducted by the same individuals or organization.
The European Union has responded by coordinating cybersecurity monitoring and information exchanges among national authorities, Europol and the European Union Agency for Cybersecurity (ENISA). In a joint statement, European institutions urged organizations to address exposure in affected refrigeration systems and strengthen preventive measures. The incidents have also renewed attention to cybersecurity obligations covering connected products and essential services, including the European Cyber Resilience Act and the NIS2 regulatory framework.
For hospitals, blood banks and other organizations dependent on controlled temperatures, the French incident illustrates why digital security must extend beyond conventional computers and databases. Refrigeration equipment, laboratory storage systems and externally managed industrial controls form part of the infrastructure supporting patient care. The successful intervention by EFS demonstrated the value of independent alarms, continuous supervision and established emergency procedures. It also revealed how vulnerabilities originating outside an institution can reach systems whose safe operation is fundamental to public health.
Where Innovation Meets Responsibility.