🔍 Read the full analysis: How A Freezer Alarm Helped A Blood Bank Respond To Hackers on ThorstenMeyerAI.com
Get audio and creator gear delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
France’s national blood service, the Établissement français du sang (EFS), said a cybersecurity incident affecting refrigeration controls at three sites was detected by its monitoring and alarm systems overnight from Nov. 1 to 2. Staff moved the stored plasma as a precaution, and EFS reports no health impact or loss of blood products. A newspaper reported that the systems were set to 110 °C, but that was a programmed target, not a measured temperature; no authority has linked the incident to attacks on supermarket refrigeration systems reported the same night.
France’s national blood service, the Établissement français du sang (EFS), says alarms detected a cybersecurity incident affecting refrigeration controls at three sites overnight from Nov. 1 to 2, allowing staff to move stored plasma before any reported product loss or health impact. The incident involved equipment used to supervise and control cold rooms holding plasma for transfusions and medicine production, according to an EFS statement reported by French media.
In its Nov. 3 statement, EFS said a refrigeration-equipment contractor had experienced a cybersecurity incident. The affected installations controlled and monitored cold rooms at three EFS sites. EFS said temperature and defrost thresholds were raised to “very high temperatures,” but its statement did not give a specific figure or identify the contractor. The service said its monitoring and alarm systems detected the anomalies quickly, after which equipment was brought under control or switched off and the contents were moved to other refrigeration installations as a precaution.
EFS said the rooms held plasma for transfusion as well as plasma intended for fractionation, a process used to make medicines. It reported that “no health impact has been identified” and that there was “no loss of blood products.” The service said technical teams were working with France’s national cybersecurity agency, ANSSI, and the health ministry, and that monitoring of temperatures across its equipment had been stepped up.
The newspaper Le Canard enchaîné, whose account was relayed by other French outlets, reported that the controls had been set to 110 °C and named refrigeration contractor Coolworld. Those details are not in the EFS statement: the EFS has not named the contractor publicly, and the source material says Coolworld had not commented. In this account, 110 °C was a controller setting, not a temperature measured in the rooms. No source cited reports that the plasma reached that temperature.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
Alarms Protected Plasma Supplies
The incident shows how a cyberattack on a service provider’s remote equipment can threaten more than the business that operates the system. At EFS, the controlled rooms held plasma used in patient care and in medicines, making refrigeration integrity a public-health concern. EFS’s reported response indicates that alarms, staff available to act overnight and alternative storage helped prevent a control-system change from becoming a reported loss of blood products.
That outcome does not establish that the attack was harmless or that every product’s handling has been independently assessed. EFS reported no health impact and no product loss; its statement also says technical work and increased monitoring are continuing. For hospitals and suppliers, the case highlights the operational value of detecting temperature changes separately from the system that sets refrigeration targets, alongside a practical plan for relocating stock. Those are lessons suggested by the reported response, not details EFS has provided about its full security design.
Products Worth Considering
LG UltraGear 32GS60QC-B 32-inch Curved QHD Gaming Monitor (180Hz, 1ms, 1000R, AMD FreeSync, HDR10)
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
Samsung Galaxy Tab A11+ (6 GB RAM, 128 GB storage, expandable) – Gray
As an affiliate, we earn on qualifying purchases.
A Separate Night of Cold-Chain Attacks
The EFS incident happened during the night that a separate wave of attacks on supermarket refrigeration systems was reported across Europe. The source material says those attacks affected at least 11 European countries. The shared timing has drawn attention because both incidents involved refrigeration controls, but no authority has linked the blood-service incident to the supermarket attacks.
Two groups describing themselves as pro-Russian later claimed the supermarket attacks in a video, according to the supplied reporting. The claims were unverified, the posts were deleted, and no government had publicly attributed those attacks to anyone at the time of the report. Those claims do not establish who was responsible for the EFS incident, which EFS described as a cyber incident involving a contractor’s equipment.
The reported 110 °C figure also needs care. It was described by Le Canard enchaîné as a programmed target, not a measured room temperature. The immediate risk was that plasma might thaw if storage temperatures rose above safe limits. The source material cites European guidance that fresh frozen plasma is stored at −25 °C or colder; EFS said the affected rooms normally operated around −30 °C, according to the newspaper’s account.
““The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.””
— Établissement français du sang, statement issued Nov. 3
Attribution and Site Details Pending
EFS has not publicly named the contractor or disclosed the two sites beyond the one region identified in the newspaper’s account, Bourgogne-Franche-Comté. The contractor’s identity and the reported 110 °C setting come from Le Canard enchaîné, not the EFS statement; the supplied material says Coolworld had not publicly commented. The precise method used to access the contractor’s system, the identity of the actor and the full scope of the incident remain unclear.
There is also no reported measured temperature for the affected rooms in the available material. The 110 °C figure is a setpoint, and should not be read as evidence that the rooms or plasma reached that temperature. EFS reports no product loss or health impact, but the source material does not provide a separate technical investigation’s findings or specify how long the controls were affected.
The supermarket attacks remain a separate, unresolved matter. Groups’ online claims were unverified and deleted, and no government attribution is reported. No connection to EFS has been established.
EFS and ANSSI Continue Review
EFS said its technical teams were working with ANSSI and the health ministry and that temperature monitoring across its equipment had been increased. The service has not, in the cited material, announced a public timetable for a technical report or further findings. The next confirmed developments would be any update from EFS, the contractor, or the authorities on the incident’s cause, scope and safeguards.
For now, the reported response is that alarms identified the problem, equipment was controlled or switched off, and plasma was moved to other installations. The service’s stated position remains that no blood products were lost and no health impact was identified. Any later attribution or broader link to the supermarket incidents would require evidence not provided in the current reporting.
Key Questions
What happened to the EFS refrigeration controls?
EFS said a cybersecurity incident affecting a refrigeration contractor’s equipment altered temperature and defrost thresholds at cold rooms in three sites. The service did not name the contractor in its statement.
Did the freezers actually reach 110 °C?
The reported 110 °C was a controller setting, according to Le Canard enchaîné, not a measured temperature. The available source material gives no measured temperature for the rooms.
Was any plasma lost or anyone harmed?
EFS reported no health impact and no loss of blood products. It said the contents were moved to other refrigeration installations as a precaution.
Was this connected to the supermarket refrigeration attacks?
No connection has been established. The incidents occurred during the same night, but no authority has linked them. Claims by groups about the supermarket attacks were unverified, and no government attribution was reported.
What happens now?
EFS said its teams were working with ANSSI and the health ministry and that temperature monitoring had been stepped up. The cause, method of access, contractor identity and full technical findings remain unclear in the available reporting.
Source: ThorstenMeyerAI.com
