Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

French blood service stops cold-room tampering after supplier cyberattack

2 sources · 2 articlesFirst reported Updated ()
What's new

November 6: Malwarebytes reports a CISA-led warning, default-password exposure, Danfoss internet-disconnect advice, and at least 17 Dutch businesses hit.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Attackers altered refrigeration at three French blood-service sites via a supplier; monitoring stopped any product loss.

France’s blood service, the Établissement Français du Sang (EFS), says a cyberattack on refrigeration supplier Coolworld changed cold-room controls at three sites, including Burgundy and Franche-Comté. Monitoring and alarms caught the changes—settings pushed toward 110°C, from about −30°C according to The Register—and staff moved plasma and other products; EFS says collection and distribution continued with no product loss or health impact. Coolworld said only limited units were hit and, according to BleepingComputer, a third-party component vulnerability was exploited. The case was reported to ANSSI and the health ministry. Outlets link it to a wider European refrigeration wave; Security Affairs cites supermarket attacks in eight countries, while The Record cites 11.

Key facts
  • Three EFS sites affected; EFS systems were not the direct target.
  • Thresholds raised toward 110°C; alarms neutralized equipment.
  • Products transferred; no blood-product loss or health impact reported.
  • Coolworld, a Dutch refrigeration provider, confirmed limited units impacted.
  • Help Net Security notes authentication attempts against Danfoss AK-SM sensors.
  • Malwarebytes says CISA and partners warned on cold-chain security.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 2, 2026EFS reports refrigeration monitoring incident at three sites. · BleepingComputer

What each outlet adds

beyond the shared facts
  • The RegisterSettings changed from about −30°C to 110°C; UK NCSC aware.
  • Infosecurity MagazineOvernight detection in Burgundy and Franche-Comté by on-call staff.
  • Help Net SecurityAuthentication attempts observed against Danfoss AK-SM sensors.
  • BleepingComputerCoolworld cites third-party component vulnerability; defrost thresholds changed.
  • Malwarebytes LabsCISA warning, default passwords, and 17 Dutch businesses affected.

Coverage

oldest first · one row per article · UTC
  1. · 7d ago The Register · SecurityFirst report

    Cyberattack Sets French Plasma Storage Controls to 110°C

    French Blood Establishment confirmed tampering with refrigeration supplier after attackers raised cold-room settings.

  2. · 7d ago Hacker News · security

    Hackers hit French national blood bank

    Hackers raised temperatures in the blood bank's cold storage facilities across Europe.