Cyberattack on refrigeration supplier disrupts French blood storage sites
No blood products were lost and no health impact was reported, but the attack exposes how remotely managed cooling can be manipulated.
France's national blood service, EFS, says a cyberattack on its refrigeration equipment supplier, which occurred on November 2, pushed temperature and defrost settings to extreme levels at three facilities that hold blood products and biological samples. Monitoring and alarm systems caught the shift quickly, and staff either repaired the equipment or moved plasma intended for transfusions and for medicine production to other cold storage, so EFS reports no health impact and no lost product. The supplier, which has not been named by EFS, is identified by Coolworld Rentals as the company whose remote monitoring software was affected, and it blames a flaw in a third-party component it does not control. The incident is part of a broader run of attacks on remotely managed refrigeration: October's assaults on French supermarkets and this month's wave across several European countries, which Sabcobel links to the same vulnerability. EFS is working with ANSSI and the Ministry of Health and has tightened monitoring of its cooling equipment.
Why it matters
The attack reached EFS through its refrigeration supplier rather than directly, so the risk sits with remote monitoring software that many cold-storage operators may share. Staff caught the temperature shift in time and moved plasma to other cold storage, which kept the blood supply intact. The same kind of attack disrupted an estimated 250 to 350 French supermarkets in October, so the weakness is not confined to one operator. EFS is now working with ANSSI and the Ministry of Health and has tightened monitoring of its cooling equipment.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.