Cyberattack targets French blood bank's plasma cooling system

A French blood bank cyberattack targeted industrial refrigeration equipment used by the French Blood Establishment (EFS). According to the report, intruders compromised a contractor named CoolWorld and manipulated supervisory control software that runs cold storage chambers. The attackers raised temperature targets from the standard minus thirty degrees Celsius to an extreme plus one hundred ten degrees Celsius, triggering automated environmental monitoring alarms. Staff quickly transferred the biological inventory to safe reserves, and no plasma spoilage was reported.

The incident affected France’s plasma storage network and, by extension, the country’s therapeutic blood products and plasma-derived medicines supply. The EFS confirmed the event in an official statement and emphasised that the breach did not result in product loss. Investigations are being conducted by the French national cybersecurity agency ANSSI, the judicial police, and health ministries.

While no ransom demands or claims of responsibility have been announced, authorities are examining whether extortion or state involvement was a factor. In the meantime, authorities urge operators of industrial cooling and OT networks to implement defence-in-depth measures, isolate OT behind encrypted VPNs, rotate credentials, and apply firmware patches, highlighting offline alarm monitoring as a key defence against remote sabotage.