🔍 Read the full analysis: Why A Blood Bank's Alarm Won During A Hack On Plasma Freezers on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
France’s national blood service, the Établissement français du sang (EFS), said a cybersecurity incident at a refrigeration contractor affected cold-room controls at three sites overnight on Nov. 1–2. Alarms and an on-call technician detected rising temperatures, plasma was moved as a precaution, and EFS reported no health impact or product loss.
France’s national blood service said a cybersecurity incident involving a refrigeration contractor altered control settings for cold rooms at three EFS sites overnight on Nov. 1–2, putting frozen plasma storage at risk. EFS said monitoring systems and alarms detected the anomalies, staff moved the products as a precaution, and no health impact or loss of blood products was reported.
In a statement issued Nov. 3, EFS said a contractor responsible for refrigeration equipment had suffered a cybersecurity incident affecting supervision and control installations for cold rooms at three of its sites. The service did not identify the contractor or provide the exact settings that were changed. It said temperature and defrost thresholds had been raised to very high levels.
The affected rooms stored frozen plasma for transfusions and plasma intended for fractionation, a process used to make medicines. EFS said its monitoring and alarm systems identified the anomalies quickly. The equipment was brought under control or switched off, and the contents were transferred to other installations as a precaution. Technical teams are working with France’s national cybersecurity agency, ANSSI, and the health ministry, EFS said.
A report by Le Canard enchaîné, relayed by other French outlets, said the rooms were set to +110 °C and named refrigeration company Coolworld as the contractor. Those details have not been confirmed in EFS’s public statement. The reported 110 °C figure is a controller setting, not a recorded room temperature; the available source material does not report that the rooms reached that temperature.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
How Alarms Protected Plasma Stocks
The incident shows how a cyber intrusion into a third-party service can create a physical risk to medical supplies, even when attackers do not access patient records or hospital systems. Frozen plasma must remain at very low temperatures, so an uncontrolled rise could make stored products unusable and disrupt supply for transfusions or medicine production.
In this case, the response depended on monitoring, alarms and human intervention, rather than on the remote control system alone. EFS says those safeguards detected the change and allowed staff to move the products. The outcome matters to hospitals and donors because it indicates that the stored plasma was protected during this incident; it does not establish how the contractor’s systems were accessed or whether similar equipment elsewhere was exposed.
The episode also underlines the potential reach of third-party remote maintenance access. A contractor’s connection to refrigeration controls can affect equipment outside the contractor’s own premises. Independent alarms, manual checks and procedures for relocating stock can limit harm if remote controls are compromised, though EFS has not detailed the specific safeguards used at each site.
Products Worth Considering
LG UltraGear 27GX704A-B 27-inch QHD OLED Gaming Monitor
EcoFlow Delta 3 Portable Power Station – 1024 Wh, 1800 W
Samsung 34-Inch Odyssey G5 Ultra-Wide Curved Gaming Monitor
As an affiliate, we earn on qualifying purchases.
The Same Night as Retail Attacks
The EFS incident occurred on the same night as a second wave of attacks on supermarket refrigeration systems in Europe, according to the supplied reporting. Those incidents affected stores in at least 11 countries. No authority has linked the blood-service incident to the supermarket attacks, and the shared timing alone does not establish a connection.
Two groups describing themselves as pro-Russian later claimed the supermarket attacks in online posts, according to the source material. The claim remains unverified; the posts were deleted, and no government has publicly attributed those attacks to a perpetrator. Those claims provide no confirmation about who was behind the EFS incident.
The EFS statement did not give a temperature reading or identify the contractor. The specific 110 °C setpoint and Coolworld identification came from Le Canard enchaîné, which the source material says was the only outlet to report those details. The distinction matters: a programmed target is not evidence that the cold rooms reached that temperature.
““The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.””
— Établissement français du sang, in its Nov. 3 statement
What Is Known About the Intrusion
EFS has not publicly named the refrigeration contractor, disclosed how the intruder gained access, or identified who was responsible. It has also not published the exact altered settings, temperature readings from the affected rooms, or a detailed timeline for each site. The reported 110 °C figure comes from press reporting, not the EFS statement, and describes a setting rather than a measured temperature.
Two of the three affected sites have not been publicly identified in the supplied material. The source does not specify how long the controls were affected, how many plasma bags or samples were moved, or whether the contractor’s systems remain accessible. There is no confirmed link between this incident and the supermarket refrigeration attacks, and the online claims about those attacks do not resolve who carried out the EFS intrusion.
EFS Reviews Controls and Monitoring
EFS said technical teams are working with ANSSI and the health ministry and that temperature monitoring across all its equipment has been stepped up. The service has not announced a public timetable for its review or described any changes to contractor access, so further details may depend on statements from EFS, the contractor or authorities.
The next confirmed information would clarify how the remote supervision system was reached, what settings were changed, and whether the incident affected any other equipment. Until those details are published, the established outcome is limited: alarms detected the anomalies, the products were moved, and EFS reported no health impact or loss.
Key Questions
What happened to the EFS plasma freezers?
EFS said a cybersecurity incident involving a refrigeration contractor affected cold-room supervision and control systems at three sites overnight on Nov. 1–2, 2026. Temperature and defrost thresholds were raised, and staff moved the stored products as a precaution.
Did a freezer actually reach 110 °C?
The supplied reporting says 110 °C was a programmed setpoint, not a measured temperature. EFS’s public statement did not give a temperature reading, and the material does not report that a room reached 110 °C.
Was plasma lost or made unsafe?
EFS reported no loss of blood products and no identified health impact. The service said the contents were moved to other installations as a precaution. Its president said the safety of the products was not affected.
Who was responsible for the incident?
No perpetrator has been publicly identified in the supplied material. EFS did not name the contractor or explain how the systems were accessed. A report naming Coolworld has not been confirmed in EFS’s statement.
Was the blood-service incident linked to supermarket attacks?
They happened on the same night, but no authority has linked them. Claims by groups about the supermarket attacks remain unverified and do not establish who was behind the EFS incident.
Source: ThorstenMeyerAI.com
