Three regional sites run by the Etablissement francais du sang, France’s national blood service, had their cold-room controls tampered with in the night of Nov. 1 to 2. Temperature and defrost thresholds on freezers holding plasma and donor samples were pushed to extremes, and a duty technician noticed the rise and raised the alarm. The health ministry says no operational consequences followed, while investigators are still working out how the attackers got in.
Tech news in one quick read: Get the most interesting stories in startups, tech and programming, each with a short TLDR, in one daily email from TLDR.
We may earn a commission if you sign up.
Coolworld, the contractor between the attackers and the freezers
The intrusion did not begin inside a blood bank. It hit Coolworld, a refrigeration and maintenance company serving the medical sector, which supplies cold-storage equipment for the blood service and is reportedly based in Bourgogne-Franche-Comté. Coolworld told reporters on Nov. 4 that only a limited number of its units were affected, and that the route in was a third-party component of its remote-monitoring software, according to La Libre’s account of the incident. The paper said the supervision and control systems of three regional sites were hit on Monday, Nov. 2, and that the total number of pieces of equipment involved is still unknown.
The satirical weekly Le Canard enchaine broke the story on Nov. 3, and the first details concerned donor samples kept for blood-safety monitoring. Later reporting said frozen plasma intended for transfusion was also in the affected chambers, as was plasma reserved for fractionation, as Clubic’s reconstruction of the night describes it. Bourgogne-Franche-Comté is the only region named in the coverage, and none of the three sites has been identified publicly.
Setpoints, defrost thresholds and the 110 degree figure
The most quoted number in the French coverage is 110 degrees Celsius, the setpoint that freezers normally held near minus 30 degrees were reportedly told to reach. IT-Connect and Cybersecurity News both stress that this is a controller setting, not a measured temperature, and the actual peak inside the chambers has not been disclosed. Clubic adds that the temperature inside did rise, and cites Benoit Grunemwald, a cybersecurity expert at ESET France, among its outside voices. Fresh frozen plasma is supposed to be stored at minus 25 degrees or colder, which is why any drift upward inside a freezer matters even when it falls short of the programmed extreme.
Neither the settings that were altered nor the way in has been spelled out. The reporting names no specific parameters beyond the temperature and defrost thresholds, no intrusion method and no responsible group, and no attacker has been identified publicly. Clubic says some devices were brought back under control or taken out of service, and that their contents were moved as a precaution. The blood service itself first said that donor samples were affected, then acknowledged to Le Canard enchaine that frozen plasma destined for patients was concerned as well, which widened the stakes of a story that began as a sample-storage problem.
EFS and ministry statements on stock safety
Sophie Le Cam, the blood service’s deputy director general, spoke to the broadcaster RTL and said no health impact had been identified and no blood product losses needed to be declared. She described the episode as the reality of a new world, and said that monitoring of the operation and temperature of all of the service’s equipment has been strengthened, according to La Libre. Independent supervision systems and the alarm that reached an on-duty technician let the service react quickly.
The office of Health Minister Stephanie Rist said stock safety was preserved by alarms, monitoring and precautions. Measures included cutting remote access to the affected equipment, tightening surveillance and moving stored products to other facilities. Investigations continue into the attack method, the number of machines touched and the timeline for restarting the systems, and the cabinet promised an update. Clubic reports that collection and distribution carry on normally, and that the service is working with the national cyber agency ANSSI and the ministry.
Links to the earlier supermarket freezer attacks
The blood-service incident came weeks after a separate wave on the night of Oct. 11 to 12, when several hundred French supermarkets saw refrigeration systems switched to heating. ANSSI, the national cybersecurity agency, issued alert CERTFR-2026-ALE-012 covering Danfoss AK-SM and AK-SC remote controllers and Copeland and Dixell xweb supervisors. IT-Connect says no confirmed link exists between those devices and Coolworld’s equipment, and FrenchBreaches likewise records that no technical connection between the two campaigns has been established.
ANSSI director general Vincent Strubel told a Senate hearing on Oct. 21 that the supermarket attacks stemmed from basic security flaws, and that the health sector uses the same kind of equipment to store vaccines and other dangerous materials, as Cyberattaque.org recounts. The open questions are the ones the ministry has promised to answer: which three sites, how many machines, how long the systems were affected and how the attackers entered. Until those answers arrive, the confirmed outcome is a negative one: no blood product losses declared, no leak of donor data announced, and no patient impact established in any of the coverage reviewed.
This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.
Tech news in one quick read: Subscribe to TLDR →
We may earn a commission if you sign up.
More from Morning Overview
- Regulators cleared the first U.S. small modular reactor, 4 months early
- Lake Powell sank to a record 3,517 feet, nearing the level that stops Glen Canyon Dam’s turbines
- Seven of Earth’s nine planetary boundaries are breached, and all seven are worsening
- The NSA says three phone features should be off whenever you aren’t using them
