🔍 Read the full analysis: How A Blood Bank Detected Hackers In Its Plasma Freezer Systems on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
France’s national blood service, the EFS, said a cybersecurity incident affecting a refrigeration contractor’s remote supervision and control systems altered cold-room settings at three sites overnight on Nov. 1–2. Alarms and an on-call technician detected rising temperatures, and plasma was moved; the EFS reported no health impact or loss of blood products. The widely circulated 110°C figure was a controller setting, not a measured temperature.
In a statement issued Nov. 3 and reported by French media, the EFS said a contractor involved in refrigeration equipment had suffered a cybersecurity incident. The incident affected “the supervision and control installations of cold rooms deployed at three EFS sites,” the service said. It said temperature and defrost thresholds had been raised to “very high temperatures,” without giving a numerical setting in its statement.
The affected rooms held frozen plasma for transfusions and plasma intended for fractionation, a process used to make medicines. The EFS said its monitoring and alarm systems identified the anomalies quickly. Equipment was brought under control or switched off, and the contents were transferred to other installations as a precaution. The service said it had identified no health impact and reported no loss of blood products.
The figure of 110°C comes from Le Canard enchaîné’s reporting, as relayed by other French outlets, rather than from the EFS statement. That reporting says rooms normally set to about −30°C were programmed to a 110°C target. The number describes a controller setting, not a temperature measured in a room; available source material does not report that the plasma or rooms reached 110°C. The EFS has not publicly named the contractor. Le Canard enchaîné identified it as Coolworld, which had not commented publicly in the supplied reporting.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
Why Plasma Storage Alarms Matter
Plasma used for transfusion and medicine production must remain frozen. The International Society of Blood Transfusion’s summary of European guidance says fresh frozen plasma is stored at −25°C or colder. A sustained rise above safe storage conditions could put products at risk, even when a dramatic controller setting is not the same as a real room temperature.
The immediate reported outcome depended on detection and response: alarms flagged the change, an on-call technician saw temperatures rising, and staff moved the stock. The incident shows why healthcare cold storage relies not only on refrigeration controls but also on monitoring, human escalation and arrangements for transferring products. In this case, the EFS reported that those steps prevented product loss and health consequences.
The event also puts attention on remote maintenance access to systems that support essential services. The EFS said a contractor was affected, but the available material does not establish how access was obtained or whether the contractor’s system was the attacker’s entry point. The operational concern is clear without assuming those unanswered technical details: a control-system incident can threaten temperature-sensitive supplies, so independent alarms and contingency procedures matter.
Products Worth Considering
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
Samsung 34-Inch Odyssey G5 Ultra-Wide Curved Gaming Monitor
Bose TV Speaker (2nd Gen) Compact Soundbar
As an affiliate, we earn on qualifying purchases.
How the Incident Was Reported
The EFS is France’s national blood service, which collects donations and supplies hospitals. Its Nov. 3 statement confirmed an incident affecting cold-room supervision and control at three sites, the precautionary movement of products and the absence of reported loss or health impact. The statement did not identify the contractor, name all three locations or publish the altered numerical settings.
Le Canard enchaîné supplied additional details in its Nov. 3 issue, including the 110°C programmed setpoint and the contractor’s alleged identity. Those details were carried by other outlets, but should be distinguished from facts stated directly by the EFS. The EFS president, Frédéric Pacoud, told BFMTV on Nov. 4 that the service could have lost samples or plasma intended for patients, while saying product safety had not been affected.
The incident occurred during the same night as a second wave of attacks targeting supermarket refrigeration systems in multiple European countries, according to the supplied reporting. No authority has linked the events. Two groups describing themselves as pro-Russian later claimed the supermarket attacks in a video, but the claim is unverified, the posts were deleted, and no government attribution was reported. That claim does not establish who was responsible for the EFS incident.
““The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.””
— Établissement français du sang, statement issued Nov. 3
Unanswered Questions About Access
The EFS has not named the refrigeration contractor or disclosed the technical route used to reach the systems. The contractor’s identity as Coolworld comes from Le Canard enchaîné’s reporting; the company had not commented publicly in the material provided. The two other affected site locations, the duration of the altered settings and the highest temperatures actually recorded have not been made public.
The EFS has not released a detailed account of whether the attacker changed settings directly, compromised a contractor account or used another method. Nor is there public evidence in the supplied reporting linking this incident to the concurrent supermarket refrigeration attacks. Claims by groups about the supermarket incidents remain unverified and cannot be treated as evidence of responsibility for the blood-service event.
Investigation and Monitoring Continue
The EFS said technical teams were working with France’s national cybersecurity agency, ANSSI, and the health ministry. It also said temperature monitoring across its equipment had been stepped up. The service has not announced a timetable for the investigation or said when it may release further technical findings.
The next public updates would need to clarify the contractor’s role, the method of access, the sites affected and whether investigators found any connection to other refrigeration incidents. Until those details are published, the confirmed account remains limited: settings at three sites were altered, alarms detected the anomalies, staff moved the products, and the EFS reported no product loss or health impact.
Key Questions
What happened to the EFS cold rooms?
The EFS said a cybersecurity incident affecting a refrigeration contractor’s systems altered temperature and defrost settings at three sites overnight on Nov. 1–2. Monitoring and alarms detected the anomalies, and staff moved the stored plasma.
Did the rooms actually reach 110°C?
That is not established. The 110°C figure was reported as a programmed target, not a measured temperature. The EFS did not give a numerical reading in its public statement.
Was plasma lost or was anyone harmed?
The EFS reported no loss of blood products and no identified health impact. It said products were transferred to other installations as a precaution.
Who was responsible for the incident?
The EFS has not publicly identified a perpetrator or named the contractor. Le Canard enchaîné identified the contractor as Coolworld, but the supplied reporting does not establish how the systems were accessed or who carried out the attack.
Was this connected to attacks on supermarket refrigeration?
The incidents happened on the same night, but no authority has linked them. Claims by groups about the supermarket attacks are unverified and do not establish responsibility for the EFS incident.
Source: ThorstenMeyerAI.com
