Cyberattack hits France’s critical blood stocks — hackers push freezer settings from -22F to 230F amid warnings over 'unprecedented' threat - TechRadar

The attack occurred overnight between November 1 and November 2, targeting Coolworld, which supplies the French Blood Establishment (EFS). The EFS is responsible for collecting, preparing and distributing blood and blood products used in essential surgeries and medical operations across France.

While the French Ministry of Health confirmed no serious operational consequences resulted from the cyberattack, as temperature spikes were noticed quickly and corrected, several critical questions remain unanswered. These include how many facilities were affected, the duration of the disruption, and how high the freezer temperatures actually reached.

Growing Infrastructure Threats

The incident follows a warning issued in October 2026 by Vincent Strubel, director general of France's cybersecurity agency (ANSSI), who specifically highlighted that refrigeration facilities storing medical resources could be targets of adversarial attacks. This concern appears particularly prescient given the timing of the blood bank breach.

Vulnerable Third-Party Systems

According to Cyberattaque, the medical facilities themselves were not directly compromised, but rather the third-party maintenance systems controlling freezer temperatures were breached. This vulnerability creates far-reaching consequences, as any company providing controller products to multiple customers potentially exposes all their clients to risk.

Richard Horne recently described the UK's cybersecurity posture as being at a 'Sliding Doors moment,' comparing its exploitable vulnerabilities to a 'digital Leaning Tower of Pisa.' He specifically identified potential targets including electricity switching, water facility controls, dam operations, manufacturing lines, heating, and refrigeration systems.

Escalating Concerns

While the French blood bank attack was quickly contained, cybersecurity experts warn that future incidents might not be detected as promptly. The potential consequences of such successful attacks could be far more severe, particularly when targeting critical infrastructure like medical supplies.

This incident follows similar attacks on European supermarket freezers for the second time in recent weeks, suggesting a coordinated strategy against temperature-controlled infrastructure. As these attacks continue, authorities are increasingly concerned about the broader implications for public safety and critical services.