French health authorities confirmed a cyberattack on Monday targeted refrigeration systems at three blood storage sites operated by the Établissement français du sang (EFS), France’s national blood service. The attack, which raised temperatures in storage units, was detected by monitoring systems before any blood products were compromised. Authorities stated that affected samples and plasma were preventively transferred to other facilities to prevent damage.
The incident follows a wave of similar attacks across Europe over the weekend, affecting supermarkets in at least six countries. Refrigeration units in Sweden, Belgium, Luxembourg, Ireland, Italy, and Estonia were remotely accessed, causing temperatures to spike and forcing businesses to discard spoiled food. In France, a prior attack in October disrupted refrigeration at approximately 700 supermarkets, according to the country’s finance minister.
EFS officials reported that the attack targeted a refrigeration equipment supplier, Coolworld, rather than the blood service directly. The organization stated that blood collection and distribution remained fully ensured, with temperature monitoring strengthened across all facilities. France’s cybersecurity agency and the Ministry of Health are investigating the incident alongside law enforcement.
Immediate Impact and Response
The EFS confirmed that the attack occurred overnight from November 1 to 2, with technicians detecting rising temperatures in storage units. The agency did not specify the exact temperatures reached but noted that units were normally set to -30°C (-22°F). According to the French publication Le Canard enchaîné, hackers attempted to raise temperatures to 110°C (230°F). The EFS declined to comment on the reported target temperature.
In response, the EFS transferred blood products to unaffected facilities as a precaution. The organization emphasized that no operational consequences resulted from the attack, and all services remained operational. The Health Ministry echoed this assessment, stating that the incident caused no disruption to blood supply chains.
Across Europe, the weekend attacks caused significant food waste. Swedish retailer ICA reported refrigeration units set to 50°C (122°F), while a butcher shop in Athens described units reaching 150°C (302°F). In France, one supermarket chain reported freezer temperatures reaching 80°C (176°F), leading to small fires in packaging. The European Commission’s agriculture commissioner described the attacks as a deliberate attempt to disrupt the food supply chain.
Broader Context and Vulnerabilities
The attacks have raised concerns about the security of internet-connected refrigeration systems, which are increasingly common in both healthcare and retail sectors. The UK National Cyber Security Centre (NCSC) warned that many organizations have outdated or unpatched systems, leaving them vulnerable to exploitation. Dr. Richard Horne, head of the NCSC, stated that the technology underpinning these systems has not been adequately invested in, making it easier for attackers—including those using AI—to identify and exploit weaknesses.
Horne confirmed that a small number of UK food suppliers were affected, though the full extent of the damage remains under assessment. He urged businesses to update software and secure vulnerable systems, emphasizing that the attacks highlight systemic risks in critical infrastructure.
Investigations and Unanswered Questions
Authorities have not attributed the attacks to a specific group or state actor. The French Finance Ministry previously linked the October supermarket attacks to a larger cyber incident, though no definitive evidence has been made public. The EU’s food supply chain commissioner described the attacks as a deliberate disruption, but no group has claimed responsibility.
The EFS and Coolworld have not provided further details on the attack vector or the hackers’ motives. Investigations by national cybersecurity agencies, including France’s ANSSI, are ongoing. The European Union has not announced any coordinated response, though the incidents have prompted calls for enhanced cybersecurity measures in critical infrastructure sectors.
Long-Term Implications
The attacks underscore the growing threat of cyber-physical incidents, where digital breaches have direct physical consequences. Experts warn that as more systems become interconnected, the potential for disruptive or destructive cyberattacks increases. The NCSC’s Horne noted that the incidents should serve as a wake-up call for businesses and governments to prioritize cybersecurity upgrades.
In France, the EFS has pledged to enhance monitoring of refrigeration systems, though it has not specified whether additional safeguards will be implemented. The Health Ministry has not indicated plans for policy changes but confirmed that it is collaborating with cybersecurity agencies to assess vulnerabilities in the blood supply chain.
The broader European response remains uncertain, with no immediate announcements of regulatory action or industry-wide standards to address the issue. The attacks, however, have highlighted the need for greater resilience in critical infrastructure, particularly as geopolitical tensions and cyber threats evolve.