Refrigeration cyberattack reaches French blood service through supplier

On 2 November 2026, the French Blood Establishment (EFS) — the public body that collects, processes and distributes blood across France — was caught up in the wave of refrigeration-system cyberattacks sweeping Europe, when intruders raised the temperature and defrost settings of cold-storage chambers at three of its facilities. EFS was not targeted directly; the attack reached it through a compromised refrigeration equipment supplier, underscoring how operational-technology sabotage can strike critical health services by way of the vendors that maintain their cold chains.

How the attack reached EFS

European refrigeration provider Coolworld Rentals confirmed that a cybersecurity incident involving its remote-monitoring software had affected a limited number of its units, and said the attackers had exploited a vulnerability in a third-party component outside its direct control. Through that access, intruders pushed the temperature and defrost thresholds in EFS cold-storage rooms to extremely high levels. EFS's own monitoring and alarm systems flagged the change quickly, and staff either repaired the affected equipment or moved stock to other refrigeration facilities before it could spoil.

A wider wave of refrigeration sabotage

The EFS incident is the latest in a string of attacks on internet-reachable refrigeration controls across Europe. In October 2026, sabotage disrupted an estimated 250 to 350 French supermarkets after attackers compromised ageing controller software and remotely forced units into defrost, spoiling food. A second wave in early November hit more than 115 stores across Belgium, the Netherlands, Sweden, Luxembourg, Ireland, Finland and Estonia, which a Belgian refrigeration vendor said exploited the same weakness. The spread from grocery chains to a national blood service marked an escalation from commercial losses toward critical health infrastructure.

Response and impact

EFS said on 3 November 2026 that its technical teams were working with France's cybersecurity agency ANSSI and the Ministry of Health, and that it had strengthened monitoring of its refrigeration equipment and temperatures. Crucially, the agency reported that "no health impact has been identified, and no loss of blood products has been reported": plasma bags destined for transfusion and plasma used to manufacture medicines were transferred or secured, and blood collection and distribution continued without interruption. No group claimed responsibility, and investigators did not say whether the EFS intrusion was linked to the supermarket campaigns or used the same underlying flaw.