How did the cyberattack affect French blood banks?

Three cold storage facilities managed by the French Blood Establishment (EFS) were subjected to a targeted cyberattack on Monday, resulting in the unauthorized modification of temperature and defrosting thresholds within the storage units. Reports indicate that the intruders gained access to internal control systems with the intent to elevate temperatures, which would have rendered the stored blood products and plasma unusable. While some outlets reported that the hackers attempted to raise temperatures to extreme levels, such as 110°C or 230°F, French officials maintained that the safety measures in place successfully prevented any degradation of the medical inventory.

Was any blood supply actually compromised?

Despite the successful infiltration of the digital control systems, the French Blood Establishment has officially confirmed that no blood samples or plasma products were compromised during the incident. The facilities' integrated alarm systems detected the anomalous behavior, alerting staff to the surge in temperature settings before the stored biological materials were affected. While the breach prompted significant concern regarding the vulnerability of critical healthcare infrastructure, authorities were able to intervene and mitigate the threat before any tangible damage occurred to the national supply.

Watch: French Blood Establishment cold storage units targeted in cyberattack — BFMTV

What is the scope of the European cyberattack?

The incident at the French blood centers is part of a broader, ongoing series of cyberattacks targeting refrigeration and cold storage systems across Europe, including recent strikes on various supermarkets. While the specific identities of the culprits remain under investigation, security analysts have noted a pattern of unauthorized access to industrial internet-connected refrigeration hardware. This development has heightened focus on the cybersecurity of vital cold chain infrastructure, as the incident marks a shift from attacks on data to the direct physical manipulation of temperature-sensitive environments.

Danielle Fieseler works on a cybersecurity risk posture project
Danielle Fieseler works on a cybersecurity risk posture project (Image: Wikimedia Commons)

The French Blood Establishment reported that while hackers successfully accessed control systems at three sites, their alarm infrastructure functioned as intended to protect the stored blood supply from temperature-induced spoilage.

As of Wednesday, the situation remains under ongoing review by French cybersecurity authorities. The attempted sabotage highlights the increasing risk to medical infrastructure as automated systems become more deeply integrated into global networks. No specific group has claimed responsibility for the French attacks, though the pattern of targeting various refrigeration units suggests a widespread campaign against similar infrastructure systems currently operating throughout the continent.