French blood agency EFS cold storage attacked by hackers: temperature setting changed from about -30°C to 110°C, plasma urgently moved with no losses
On the night of November 1 to 2, 2026, the cold storage monitoring and control systems at three sites of the French Blood Establishment (Établissement français du sang, EFS) were attacked by hackers. Through the remote system of its refrigeration equipment supplier Coolworld, the cold storage temperature target and defrost threshold originally set at about -30°C were remotely changed to extremely high temperatures (reported by Le Canard enchaîné as 110°C). The cold storage held donor samples and frozen plasma for transfusions and drug production.
EFS’s monitoring and alarm systems and on-duty technical staff promptly detected the abnormal temperature rise, and staff urgently moved or secured the plasma and samples to other facilities. EFS confirmed that it was not directly attacked, but that the supplier had been compromised; there were no losses of blood products, no health impact, and blood collection and distribution operations continued normally. Coolworld said only limited equipment was affected, that the vulnerability came from a third-party component (not under its direct control), and that response measures had been taken. The incident occurred after similar attacks on supermarket refrigeration systems in several parts of Europe.
Main sources
Le Canard enchaîné, published on November 3, 2026.
URL: https://www.lecanardenchaine.fr/police-justice/55332-les-hackers-ont-du-sang-sur-les-mains
Verification: The article directly reported that Coolworld was attacked, that the cold storage was programmed from -30°C to 110°C, that EFS confirmed frozen plasma was involved, and that technical staff detected the anomaly. EFS issued an official statement on November 3 confirming the details of the incident (no losses, products moved). Coolworld’s website issued a statement confirming a cybersecurity incident.
ABAB AI Insight
History: Europe has recently seen a wave of attacks targeting industrial refrigeration control systems (OT), first hitting supermarket freezers (exploiting vulnerabilities in Danfoss and other controllers) and then spreading to critical medical facilities.
Business path: Attackers targeted weak points in the supply chain (third-party remote monitoring software) rather than directly penetrating core institutions, using exposed remote interfaces on IoT/OT devices.
Comparison: Similar supermarket incidents caused food to be discarded, whereas this time timely alarms prevented actual losses, highlighting the importance of monitoring and manual intervention.
Assessment: Such attacks carry high risk and relatively low technical barriers (remotely changing setpoints), posing an ongoing threat to critical infrastructure (blood and drug cold chains). ANSSI has already warned about the risks of related controllers. Recommendation: strengthen OT network isolation, independent alarms, and supplier security audits.
Cognitive law
Supply chain security is a weak point for critical infrastructure; the effectiveness of monitoring and alarms determines the extent of actual damage.