Hackers Target French Blood Bank Freezers in Coordinated Cyberattack
Cybercriminals attempted to raise freezer temperatures at three French blood banks from -22°F to 230°F, but quick-thinking staff saved the life-saving supplies. The attack is part of a wider wave of incidents targeting internet-connected cold storage across Europe.
Hackers launched a cyberattack on three regional blood banks in France, attempting to remotely raise the temperature of storage freezers from minus 22 degrees Fahrenheit to 230 degrees Fahrenheit. The incident, confirmed by France's health ministry on Wednesday, targeted the cold storage monitoring and control systems at the facilities. Quick action by staff prevented any loss of blood supplies, according to the French Blood Establishment (EFS).
EFS spokesperson Charley Dubois said personnel are present around the clock because blood may be needed at any time. Staff were alerted to the temperature anomalies and immediately transferred the blood to refrigerators that were not connected to the internet, averting what could have been a serious disruption to life-saving stocks. The equipment was brought back under control by Wednesday, and remote access to the refrigerators has now been disabled, the health ministry added.
The attack was first reported by the French weekly La Canard Enchaîné, which said the hackers appeared to be trying to reset the storage unit temperatures to 230 degrees Fahrenheit. The motive remains unclear, but the timing coincides with a broader campaign targeting refrigerators at stores in eight European countries, including major retailers in Sweden, Belgium, Luxembourg and Estonia. In those incidents, freezer units were hacked to reach 122 degrees Fahrenheit, spoiling thousands of dollars' worth of meat and dairy products.
The blood bank incident marks the second time in a week that internet-connected cold storage units in Europe have been compromised. Last month, hundreds of supermarket fridges in France were hacked in similar attacks that caused fires and food losses. The Pentagon also said last week that it was treating an August freezer malfunction at six military bases as a potential cyberattack.
The string of incidents highlights growing concerns over the security of internet-connected industrial and commercial equipment, often referred to as operational technology. Experts have warned that poorly secured monitoring systems can be exploited to cause physical damage or disrupt essential services. French authorities have not publicly identified the perpetrators or a possible motive behind the blood bank attack.
While no injuries or supply shortages were reported, the episode underscores the vulnerability of critical infrastructure to remote cyber intrusion. The EFS and health ministry have not announced additional security measures beyond disabling remote access, but the incident is likely to prompt a review of cybersecurity protocols at blood collection and storage facilities across the country.
