🔍 Read the full analysis: A Blood Bank's Plasma Freezer Alarm Stood Out During A Nighttime Hack on ThorstenMeyerAI.com
Get business pricing on monitors, keyboards and dev gear
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
France’s national blood service, the EFS, said a cybersecurity incident involving a refrigeration contractor affected cold-room control systems at three sites overnight on Nov. 1–2. Alarms and an on-call technician detected rising temperatures, and plasma was moved; the EFS reported no health impact or loss of blood products. A reported setting of 110 °C was a controller target, not a measured room temperature.
France’s national blood service said a cybersecurity incident involving a refrigeration contractor altered control settings for cold rooms at three EFS sites overnight from Nov. 1 to Nov. 2, prompting staff to move stored plasma as a precaution. The EFS said its alarms detected the problem, with no health impact identified and no blood-product losses reported.
In a statement issued Nov. 3, the Établissement français du sang (EFS) said the incident affected monitoring and control installations for cold rooms at three locations. The service said temperature and defrost thresholds were raised to very high settings. It did not name the refrigeration contractor or provide the altered settings in its statement. The affected rooms held frozen plasma for transfusion and plasma intended for fractionation, a process used to make medicines.
Le Canard enchaîné, in a report cited by French outlets including franceinfo and Next, reported that controllers were set to 110 °C in rooms normally kept near minus 30 °C. That figure describes a programmed target, not a temperature reported as having been measured in the rooms. The newspaper identified the contractor as Coolworld; the EFS did not name it, and Coolworld had not publicly commented in the source material.
The EFS said its monitoring and alarm systems identified the anomalies quickly. An on-call technician noticed temperatures rising overnight, according to the reporting. The equipment was brought under control or switched off, and the contents were moved to other installations. The service said technical teams were working with France’s national cybersecurity agency, ANSSI, and the health ministry, and that temperature monitoring across EFS equipment had been stepped up.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
How Alarm Systems Protected Plasma
The incident shows how remote access to refrigeration controls can put temperature-sensitive medical supplies at risk, even when the targeted system belongs to a contractor rather than the blood service itself. Frozen plasma must remain cold enough for its intended use; European guidance cited in the source material says fresh frozen plasma is stored at minus 25 °C or colder. A rising temperature can therefore require a fast response to protect products and patients.
In this case, the EFS says alarms detected the abnormal settings and staff moved the plasma before any product loss was reported. That response matters beyond this incident: hospitals and blood services rely on dependable cold storage, monitoring, and contingency arrangements. The available information does not establish that products warmed beyond safe limits or that patients faced a direct exposure.
The episode also illustrates why safety monitoring should not depend solely on the same control system that manages refrigeration. The source account points to alarms, human oversight, and the ability to relocate stock as factors in the response. It does not provide enough technical detail to establish how the attacker gained access or whether any particular security measure failed.
Popular right now
TCL 65-Inch QM6K QLED Mini-LED 4K HDR Smart Google TV, 144Hz
KitchenAid Artisan 5-Quart Tilt-Head Stand Mixer, Almond Cream
Vitamix 5200 Professional-Grade Blender, 64 oz. Container, Black
As an affiliate, we earn on qualifying purchases.
Three Sites and a Wider Cold-Chain Night
The EFS collects blood donations and supplies hospitals across France. Its statement described the incident as a cybersecurity event affecting installations operated in connection with a refrigeration equipment contractor. The service said it was not directly targeted, according to the source material. The EFS has publicly identified one affected area as Bourgogne-Franche-Comté, while the other two site locations were not disclosed in the reporting provided.
The same night, supermarket refrigeration systems in multiple European countries were also reportedly attacked. The source material says at least 11 countries were affected in a second wave of incidents. However, no authority had linked the supermarket attacks to the EFS incident. Two groups describing themselves as pro-Russian later claimed responsibility for the supermarket attacks in a video, according to the source; the claim was unverified, the posts were deleted, and no government attribution was reported. Those claims do not establish a connection to the blood-service event.
The EFS case also differs from online descriptions suggesting plasma was “boiled.” The reported 110 °C figure was a controller setpoint, and the source material reports no measured temperature approaching it. A programmed target does not show that a cold room actually reached that temperature.
““The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.””
— Établissement français du sang, statement issued Nov. 3
Access Route and Temperatures Unknown
The EFS has not publicly named the contractor in the statement described in the source material, and it has not disclosed the other two affected sites. The contractor identification and the reported 110 °C setpoint come from Le Canard enchaîné’s account, rather than the EFS statement. Coolworld had not publicly commented in the supplied reporting.
It remains unclear how the remote access was obtained, who was responsible, how long the settings were altered, and what temperatures the rooms actually reached. The source material says no measured temperature near 110 °C was reported. The EFS said no health impact or product loss had been identified; further technical findings and any investigation conclusions were not provided.
There is also no confirmed link between the EFS incident and the concurrent attacks on supermarket refrigeration. Claims by groups about the supermarket attacks remain unverified and do not amount to an official attribution for either event.
EFS and ANSSI Continue Their Review
The EFS said its technical teams were working with ANSSI and the health ministry and that monitoring of temperatures across its equipment had been increased. The service has not, in the material available, announced a timeline for completing its review or released a detailed account of the intrusion.
Further updates may clarify the contractor’s role, how access to the control systems was obtained, which sites were affected, and whether investigators can determine who carried out the intrusion. Until then, the confirmed public account remains that alarms detected rising temperatures, plasma was moved as a precaution, and the EFS reported no product loss or health impact.
Key Questions
Did the plasma freezers actually reach 110 °C?
No such measured temperature is reported. The 110 °C figure comes from a report that a controller was set to that target; it was not a reading of the room’s actual temperature.
Was any blood product lost or was anyone harmed?
The EFS reported no health impact and no loss of blood products. It said the plasma was moved to other installations as a precaution after its alarms detected the anomaly.
How many EFS sites were affected?
The EFS said control and monitoring installations at three sites were affected. The source material identifies Bourgogne-Franche-Comté as one area; the other two locations were not public in the reporting provided.
Who carried out the incident?
No perpetrator has been identified publicly in the supplied material. The EFS said it was working with ANSSI and the health ministry. Claims about groups behind separate supermarket attacks remain unverified and do not establish responsibility for this incident.
Was this connected to the supermarket refrigeration attacks?
The incidents occurred on the same night, but no authority had linked them in the source material. A shared timing alone does not establish that they had the same perpetrators or method.
Source: ThorstenMeyerAI.com
