Cyberattack targeted refrigeration systems at three French blood-storage facilities

The attack took place on a Monday, according to supplied reporting, and affected systems used to keep blood products, donated blood samples or plasma in controlled conditions. The attackers raised the refrigeration temperature and defrosting thresholds to very high levels, according to the reported account of the incident.

The French Blood Establishment said its alarm systems detected the problem and allowed technicians to intervene before the stored products were compromised. France 24 likewise described the attack as unsuccessful because of the facilities’ alarms, while other reporting said the stored units appeared not to have been damaged.

The incident placed critical medical refrigeration infrastructure alongside food-storage systems targeted in recent attacks across Europe. The Guardian, France 24 and POLITICO Europe reported it as part of, or an apparent escalation of, a wider wave involving refrigeration systems at European supermarkets and other organizations. That reporting does not establish that all of the incidents were operationally connected.

The available evidence confirms the attempted manipulation of storage controls and the intervention that protected the products, but it does not establish the attackers’ identity or motive. Reports also vary in how specifically they describe the attempted temperature increase; the strongest supplied account uses the more cautious wording that the thresholds were raised to very high levels.

The episode nevertheless demonstrates the consequences of exposing refrigeration controls to cyberattack: a change to a facility setting can threaten the preservation of blood supplies even when alarms and human intervention prevent losses. In this case, the supplied reporting indicates that the safety systems worked before the products were compromised.