Attackers remotely changed the target temperature of refrigeration units at the French blood transfusion service to 110 degrees Celsius — a swing of 140 degrees from the minus 30 degrees at which the units normally store blood products — but monitoring systems and a rapid response prevented any loss, techrush.de reported.
The attack hit several cooling units maintained by the service company Coolworld at the Établissement français du sang (EFS) during the night of November 1–2, 2026. The intruders gained access to the control systems and reset the set point, according to the report.
Monitoring Caught the Change Before Blood Was Lost
An on-call technician was alerted by the monitoring systems and intervened in time. EFS said no blood products were lost and that the supply of donor blood continued without interruption.
Internet-Connected Cooling Systems Are a Recurring Target
This was not the first attack on networked refrigeration. Supermarkets in several European countries had previously been hit by similar intrusions, and individual cases were reported from Germany. Germany’s Federal Office for Information Security (BSI) had already warned about insufficiently secured cooling systems, flagging devices reachable over the internet that do not receive regular security updates as especially vulnerable.
ANSSI and Health Ministry Investigating; Link to Earlier Attacks Unclear
France’s cybersecurity agency ANSSI and the health ministry are investigating the incident. Whether the attack on the blood banks is connected to the earlier incidents remains unclear, techrush.de reported.
How Cooling Systems Responded During Attack
Were any blood products destroyed in the attack?
No. EFS stated that no blood products were lost and that donor blood supply continued without interruption, because monitoring systems raised an alarm and a technician intervened in time.
Who maintains the cooling systems at the French blood service?
The maintenance of the affected refrigeration units is handled by the service provider Coolworld, which techrush.de identified as the company responsible for the systems the attackers accessed.
Have cooling systems been attacked before?
Yes. Supermarkets in multiple European countries and individual cases in Germany were previously targeted, prompting the BSI to warn about internet-reachable cooling devices that lack regular security updates.
More on Federal Office for Information Security
Keep reading