French blood service stops cold-room tampering after supplier cyberattack
November 6: Malwarebytes reports a CISA-led warning, default-password exposure, Danfoss internet-disconnect advice, and at least 17 Dutch businesses hit.
Attackers altered refrigeration at three French blood-service sites via a supplier; monitoring stopped any product loss.
France’s blood service, the Établissement Français du Sang (EFS), says a cyberattack on refrigeration supplier Coolworld changed cold-room controls at three sites, including Burgundy and Franche-Comté. Monitoring and alarms caught the changes—settings pushed toward 110°C, from about −30°C according to The Register—and staff moved plasma and other products; EFS says collection and distribution continued with no product loss or health impact. Coolworld said only limited units were hit and, according to BleepingComputer, a third-party component vulnerability was exploited. The case was reported to ANSSI and the health ministry. Outlets link it to a wider European refrigeration wave; Security Affairs cites supermarket attacks in eight countries, while The Record cites 11.
- Three EFS sites affected; EFS systems were not the direct target.
- Thresholds raised toward 110°C; alarms neutralized equipment.
- Products transferred; no blood-product loss or health impact reported.
- Coolworld, a Dutch refrigeration provider, confirmed limited units impacted.
- Help Net Security notes authentication attempts against Danfoss AK-SM sensors.
- Malwarebytes says CISA and partners warned on cold-chain security.
Timeline
dated events in the reporting · oldest first- Nov 2, 2026EFS reports refrigeration monitoring incident at three sites. · BleepingComputer
What each outlet adds
beyond the shared facts- The RegisterSettings changed from about −30°C to 110°C; UK NCSC aware.
- Infosecurity MagazineOvernight detection in Burgundy and Franche-Comté by on-call staff.
- Help Net SecurityAuthentication attempts observed against Danfoss AK-SM sensors.
- BleepingComputerCoolworld cites third-party component vulnerability; defrost thresholds changed.
- Malwarebytes LabsCISA warning, default passwords, and 17 Dutch businesses affected.
Coverage
oldest first · one row per article · UTCCyberattack Sets French Plasma Storage Controls to 110°C
French Blood Establishment confirmed tampering with refrigeration supplier after attackers raised cold-room settings.
Hackers hit French national blood bank
Hackers raised temperatures in the blood bank's cold storage facilities across Europe.