Recently, cyber hackers compromised refrigeration controls at three facilities managed by France’s national blood service, Établissement français du sang (EFS). Prompt action by staff ensured the security of stored plasma and facilitated the relocation of materials prior to any potential damage occurring.
The incident, which took place on November 2, involved systems operated through a refrigeration supplier but did not disrupt blood collection or distribution channels, according to EFS.
This attack aligns with recent cyber threats targeting refrigeration systems utilized by European supermarkets and food suppliers. However, in the case of EFS, the rooms at risk contained plasma designated for blood transfusions and pharmaceutical manufacturing as well as essential biological samples.
In its communication dated November 3, EFS disclosed that temperature and defrost settings were altered to unusually high values. The facility’s monitoring and alarm systems alerted staff to these changes, allowing timely intervention to protect the integrity of the stored products.
According to EFS, no adverse health impacts have been noted, and all blood products remain secure.
Staff Intervened Before Plasma Was Damaged
Reports from Le Canard enchaîné indicated that this cyber attack occurred during the night of November 1-2, modifying the equipment settings from the standard operating temperature of approximately minus 30°C to a drastically high setting of 110°C. EFS confirmed that operational thresholds were altered, though it did not officially acknowledge the specific temperature figure.
A technician on night duty reportedly identified the issue, enabling staff to either regain control of the equipment or transfer supplies to alternate cold-storage locations. EFS confirmed that the plasma and stored samples remained unharmed and has since enhanced its equipment and temperature monitoring protocols. The organization’s technical teams are collaborating with the national cybersecurity agency, ANSSI, and the Health Ministry to bolster defenses.
Investigators are currently probing how the perpetrators gained access, the specific equipment impacted, and the procedures necessary to ensure a safe return to service for the compromised systems.
Supplier Points to a Third-Party Component
Although EFS did not specify its refrigeration supplier, sources attribute the vendor to Coolworld, particularly considering its operations in Bourgogne-Franche-Comté. Coolworld has recognized a cybersecurity incident involving its remote-monitoring software for refrigeration systems. In a statement issued on November 4, the company indicated that only a limited number of its units were affected and highlighted that the vulnerability arose from a third-party component not under its direct governance.
The company is implementing protective measures and offering support to its clients but withheld details regarding individual cases and the nature of the compromised component or the attack vector used.
Similar Attacks Have Disrupted Food Businesses
This incident at EFS is part of a broader trend of cyber attacks disrupting refrigeration systems at food retailers across Europe, which have led to altered temperature settings, disabled alerts, and considerable food loss. Similar events impacted French supermarkets last month. However, it remains unverified if the same malicious actors or methods were involved in the EFS incident.
In healthcare settings, independent alarms and proactive staff responses are critical in mitigating potential losses from tampering. The EFS case illustrates effective measures in preventing damage before it occurred, as noted by cybersecurity experts.
Darin Fredde, Senior Director of Technical Marketing Engineering at Ridge Security, made an important clarification regarding the attack: changing a temperature setpoint does not equate to an actual temperature change, emphasizing the value of monitoring systems. Damon Small, a board member at Xcape, Inc., reinforced the need for stringent controls for any internet-connected devices that could impact human safety.