Cyber Attack Hits French Blood Banks: Temperatures Spiked, Stock Saved
EFS confirms a service provider was targeted, allowing staff to move plasma and samples before damage occurred.
By Sanjay Ivanov ·
A cyber attack forced refrigeration units at three French blood banks to reach extreme temperatures, though monitoring systems allowed staff to protect the inventory. French authorities disclosed the incident on 4 November, stating that cold room conditions changed rapidly. The quick response by on-site personnel prevented damage to the stored blood products.
The French Blood Establishment, or EFS, identified the target as one of its external service providers rather than its own internal systems. The attackers manipulated temperature and defrost settings, pushing them to very high thresholds. EFS reported no health consequences and confirmed that no blood products were lost during the event.
EFS stated that only a limited number of sites were impacted by the breach. The organization noted that additional technical data from the service provider is required to determine the full scope of the intrusion. Officials declined to release specific temperature readings for the affected equipment, citing ongoing analysis.
Staff intervened immediately after monitoring alarms detected the shifts in the cold rooms. As a precaution, EFS secured or relocated all blood products and samples from the compromised units to other facilities. The inventory included plasma bags for transfusions and plasma used in pharmaceutical manufacturing.
Following the incident, EFS increased verification checks on the operation and temperatures of all its refrigeration hardware. The organization reported no impact on the safety of its stock, and blood collection and distribution operations continue. EFS teams are coordinating with the French National Cybersecurity Agency, ANSSI, and the Ministry of Health.
EFS has not yet identified the origin of the attack or the specific actors responsible. This event follows similar cyber incidents that targeted meat processing facilities in Britain and supermarkets across Europe, where compromised appliances warmed up and spoiled food worth millions of dollars.
The incident also arrives days after Britain's National Cyber Security Centre, or NCSC, issued a warning on 3 November. The agency assessed that artificial intelligence is enabling attackers to operate on an industrial scale. The NCSC expects AI to be highly likely in attacks against critical national infrastructure by 2028. The agency separately identified China as the UK's most sophisticated cyber challenge, noting likely AI usage for geopolitical goals within that same timeframe.
Source: Sky News
