Source: Associated Press
The campaign of cyberattacks against refrigeration systems in Europe has reached the healthcare sector. On Monday 2 November 2026, a cybersecurity incident hit a supplier of refrigeration equipment serving three sites of the French Blood Establishment (Etablissement Francais du Sang, EFS), the organisation that manages the national blood supply.
What happened
According to the EFS statement, temperature and defrosting thresholds were raised to extremely high levels on monitoring and control systems at the three cold storage sites. French weekly Le Canard Enchaine reported that the systems, which normally hold plasma at minus 30 degrees Celsius, were programmed to reach as high as 110 degrees Celsius. The stored material included bags of plasma intended for transfusions and plasma used to manufacture medicines.
This time the safeguards worked. The EFS said monitoring and alarm systems quickly detected the anomalies, allowing staff to act, and no blood products or samples were lost and no health consequences were identified. Collection and distribution operations continued without interruption. The refrigeration equipment supplier, Coolworld, said the vulnerability reported in the media relates to a component from a third party supplier and was outside its direct control, and that only a limited number of units were affected. France’s national cybersecurity agency and the Health Ministry are investigating. The incident follows the waves of attacks on supermarket refrigeration across at least nine European countries, and no group has claimed responsibility.
The pattern is the point
Attackers are targeting the same weak spot everywhere: internet connected control systems for cooling, run by external suppliers, with minimal security oversight. That it was attempted against a blood bank shows the threat is no longer a retail nuisance but a potential patient safety issue. The difference between this incident and a public health emergency was not luck. It was functioning monitoring, alerting and response, the exact things a well prepared operator has and an unprepared one does not. Every organisation with cold chain obligations, from laboratories and pharmacies to food producers and logistics firms, should be asking whether its own monitored systems would detect an attack tonight.
Find out whether your operational technology would catch this kind of manipulation. Contact the team at Excello Digital for a professional OT and IoT security review.