Cyberattack Targets French Blood Storage Facilities, Threatening Vital Medical Supplies
Hackers breached refrigeration control systems at three French blood storage facilities and attempted to raise temperatures to dangerous levels, but emergency monitoring systems prevented damage to blood products.
France’s national blood service, the French Blood Establishment (EFS), has confirmed a cyberattack targeting refrigeration systems at three of its facilities. The incident occurred overnight on November 2, 2026, when hackers accessed systems used to monitor and control cold-storage equipment. The attackers reportedly raised temperature and defrosting thresholds to extremely high levels, potentially threatening plasma supplies used for blood transfusions and medicine production.
According to EFS, the attack targeted a refrigeration equipment provider rather than the blood service directly. Automated monitoring and alarm systems quickly detected unusual changes, allowing technicians to intervene before any medical supplies were compromised. As a precaution, affected equipment was brought under control or taken out of service, while stored plasma products and biological samples were transferred to other facilities.
The incident affected three cold-storage locations responsible for preserving vital medical materials. EFS confirmed that no blood products or samples were lost and no health consequences were reported. The organisation also maintained that blood collection, processing and distribution continued without interruption. France’s national cybersecurity agency and Ministry of Health have been notified and are investigating the circumstances surrounding the breach.
The attack comes amid a growing wave of cyber incidents targeting refrigeration systems across Europe. Similar attacks have disrupted supermarket cooling systems in several countries, causing significant food losses and financial damage. European authorities are increasingly concerned about the vulnerability of internet-connected industrial equipment, particularly systems supporting essential services. Although no group has claimed responsibility, the incidents have raised fresh questions about cybersecurity protections for critical infrastructure.
