Cyber Incident Disrupts French Blood Storage Systems
A cybersecurity incident involving a refrigeration equipment provider altered temperature settings at three French Blood Establishment sites. The organization said its alarm systems prevented any damage to blood samples or products.
Banner: Antonio Montuno/Flickr| A cyberattack affecting refrigeration systems at three French Blood Establishment sites prompted precautionary measures, but no blood products were damaged.
Reported by
Sana Sbouai
OCCRP
Alena Koroleva
OCCRP
November 5, 2026
|
The French Blood Establishment (EFS) said a cybersecurity incident involving one of its refrigeration equipment providers disrupted cold storage systems at three of its sites, causing temperature and defrost settings to rise to unusually high levels.
The incident occurred on November 2, according to a statement published by EFS the following day. The organization said it was not directly targeted, but the attack on its provider affected systems used to monitor and control refrigeration units.
EFS said its alarm systems enabled staff to respond promptly, ensuring that no blood samples or products were compromised. As a precaution, the contents of the affected refrigeration units were transferred to other facilities.
The statement confirmed information reported earlier by the French satirical newspaper Le Canard enchaîné, which identified refrigeration equipment provider Coolworld as the apparent target of the incident.
Coolworld also acknowledged a cybersecurity incident involving remote monitoring software used in refrigeration systems, although it did not explicitly link the incident to EFS.
The company said the issue originated from a component supplied by a third-party provider, which it did not identify.
Asked by email, Coolworld declined to provide further details about the nature of the incident or the identity of the third-party provider. However, the Paris public prosecutor’s office told OCCRP that its cybercrime section has taken up the matter on its own initiative, and investigations are currently underway.
The incident comes just three weeks after a cyberattack targeting refrigeration systems at supermarkets across France.
In that case, hackers exploited remotely accessible refrigeration controllers to raise freezer temperature settings to 50 degrees Celsius (122 degrees Fahrenheit), causing millions of euros in losses and prompting a national cybercrime investigation.
Both incidents highlight the vulnerability of refrigeration systems connected to remote monitoring and control software, although no connection between the two has been established.
NOTE: Story updated with the Paris Prosecutor’s statement in the 7th graph.
