Hackers Tampered With French Blood Bank Freezer Settings, Ministry Confirms
A cyberattack on refrigeration equipment used by France's blood service changed temperature settings overnight, prompting an urgent response from on-call staff. Authorities say no plasma was lost and transfusion services were unaffected.
French health authorities have confirmed that hackers tampered with the temperature settings of refrigeration systems used by the French Blood Establishment (EFS), in an incident that briefly raised alarm over the safety of stored blood products. The attack is reported to have taken place overnight between November 1 and 2, 2026, according to French media accounts.
According to the reports, the intruders altered control settings from roughly -30°C to 110°C. That figure refers to the value entered into the refrigeration control system rather than the actual temperature reached inside the freezers. Fresh frozen plasma is required to be kept at -25°C or below, since prolonged exposure to warmer conditions can make it unsuitable for transfusion.
The compromised equipment is linked to Coolworld, a company that supplies and maintains refrigeration units for healthcare facilities. Facilities in the Bourgogne-Franche-Comté region were among those affected. France's Health Ministry said an on-call technician spotted the unusual temperature changes during the night, allowing staff to act quickly and avert operational disruption.
Initial reports indicated that the affected units held donor samples used for blood safety monitoring. The EFS later clarified that frozen blood plasma intended for transfusions was also stored in the impacted equipment. Authorities have not reported any loss of plasma, any interruption to transfusion services, or any harm to patients.
It remains unclear who carried out the attack and how they gained access to the refrigeration systems. Officials have also not disclosed how many units were affected or how long the altered settings remained in place. The case adds to growing concern about the cybersecurity of connected equipment in healthcare and other critical infrastructure.
The incident highlights the risks posed by internet-connected industrial and medical systems, where a single compromised control setting can trigger serious safety concerns. French authorities have not announced any arrests or identified a motive, and investigations are reportedly continuing.
