Blood banks in France hit by cyber attack that spiked fridge temps

Three French blood banks faced a cyber intrusion that pushed refrigeration temperatures to extreme levels, French authorities confirmed on 4 November. The attack altered conditions in the cold storage rooms, but staff received alerts from monitoring systems before the heat could damage the inventory.

The French Blood Establishment, or EFS, stated that the intrusion targeted one of its external service providers rather than the central organization. Hackers manipulated temperature and defrost settings, raising them to very high thresholds. Despite the disruption, EFS reported that no blood products were lost and no health consequences were identified for patients or staff.

EFS told Sky News that only a limited number of sites were impacted. The organization said it needs further technical details from the provider to determine the full scope of the breach. It declined to reveal the specific temperatures reached in the affected equipment during the incident.

Staff moved all blood products and samples from the compromised equipment to other facilities as a precaution. The stored items included bags of plasma for transfusions and plasma used in manufacturing medicines. EFS said it has since strengthened checks on the operation and temperatures of all its refrigeration units.

Blood collection and distribution activities have continued without interruption. EFS teams are working with the French National Cybersecurity Agency, ANSSI, and the Ministry of Health to investigate the event. The organization has not yet identified the origin of the attack or the parties responsible.

This incident follows recent cyber attacks on Britain's meat processing industry and European supermarkets. Those retailers reported that remotely compromised fridges and freezers warmed up, spoiling food worth millions of dollars. The French attack also comes shortly after the UK's National Cyber Security Centre issued a warning on 3 November about artificial intelligence threats.

The NCSC, part of GCHQ, assessed that AI is helping attackers operate on an industrial scale. It stated that the technology is highly likely to be used against Britain's critical national infrastructure by 2028. The agency also described China as the UK's most sophisticated and sustained cyber challenge, noting it is likely to use AI to advance geopolitical objectives within the same timeframe.