Analysis
Cyberattack on France's blood service: temperature limits raised at three plasma storage sites, no products lost
France's blood service says no product was lost after temperature limits were raised at three plasma sites; a refrigeration supplier was the target.
On Monday, November 2, 2026, the temperature and defrost thresholds at three plasma cold-storage sites of the French Blood Establishment (EFS) were raised to extreme levels. The EFS says no blood product was lost and no health consequence has been identified: alarms caught the anomaly in time. The attack hit a refrigeration equipment supplier, not the EFS itself. As of November 5, nobody has claimed responsibility, and nothing establishes a link to the supermarket attacks.
The essentials
- What is established: three plasma cold-storage sites were affected on November 2; temperature and defrost thresholds were raised; no product was lost, according to the EFS.
- The cause put forward: the attack targeted a refrigeration equipment supplier. According to CBS News (AP), that supplier, Coolworld, blames a third-party component.
- The 110 °C figure: reported by Le Canard enchaîné, it is a requested setpoint, not a measured temperature.
- What is missing: who did it, the exact method, and any link to the October attacks.
What happened at the EFS sites?
The EFS issued a statement late on Tuesday, November 3, and the Health Ministry confirmed the incident on Wednesday, November 4. According to those statements, relayed by CBS News (AP) and CNBC, the temperature and defrost thresholds of three plasma cold rooms were set extremely high. These units store blood products before delivery to healthcare facilities, along with samples meant for EFS biobanks.
The products involved were bags of plasma for transfusion and plasma used to make medicines. They were moved or secured. Monitoring and alarm systems detected the anomalies quickly, which left time to act. The EFS says collection and distribution were not interrupted and that it stepped up temperature monitoring across all its equipment (technology.org).
At first, reports mentioned only donor samples kept for blood-safety monitoring. The EFS later told Le Canard enchaîné that frozen plasma meant for transfusion was also involved (Cyber Security News).
Who was targeted, and what about the third-party component?
According to CNBC, the EFS was not the direct target: cold-storage units run by external providers, holding its products, were compromised at three sites. According to CBS News (AP), the attack hit the supplier Coolworld, which Le Canard enchaîné had named. Coolworld says a third-party component is at fault, that only a limited number of units were affected, and that it is taking measures. We found no technical description of that component or of the flaw.
On temperatures, Le Canard enchaîné reports settings changed from about −30 °C to 110 °C. Cyber Security News stresses that this is a setpoint requested from the control system, which does not prove that freezer interiors or plasma bags reached that temperature. The same source says fresh frozen plasma must be stored at −25 °C or below: a prolonged rise could make it unfit for transfusion, hence the value of fast detection.
How does this relate to the supermarket fridge attacks?
Media outlets place the incident in a series. Overnight on October 11–12, hundreds of French supermarkets had their refrigeration systems hijacked, with temperatures pushed up to 50 °C, spoiled goods and fires. The Paris prosecutor opened an investigation (OCCRP). For those stores, the ANSSI pointed to Danfoss controllers, according to Solutions Numériques; nothing indicates that this equipment is involved at the EFS.
On November 2, AP reported fridge and freezer failures apparently caused by cyberattacks at supermarkets in Sweden, Belgium, Luxembourg, Ireland and Estonia. The ANSSI and the Health Ministry are investigating the EFS incident without naming anyone responsible (CBS News, AP). No source says the October and November 2 attacks were carried out by the same actor.
Summary table
| Point | What sources say as of November 5, 2026 | Source |
|---|---|---|
| Date | Monday, November 2, 2026 | EFS, via CBS News (AP) |
| Sites affected | Three plasma cold-storage sites | EFS, via CBS News (AP) |
| Effect | Temperature and defrost thresholds raised to extreme levels | EFS, via CBS News (AP) and CNBC |
| Products lost | None; no health consequence identified | EFS |
| Target | A refrigeration equipment supplier, not the EFS directly | CBS News (AP), CNBC |
| Cause put forward | A third-party component, according to Coolworld | CBS News (AP) |
| Temperature requested | About 110 °C (setpoint), versus about −30 °C | Le Canard enchaîné, via CBS News (AP) |
| Perpetrator | Unknown; ANSSI and Health Ministry investigating | CBS News (AP) |
Frequently asked questions
Were any plasma bags lost?
No, according to the EFS: no blood product lost and no health consequence identified. The products were moved or secured.
Is blood donation affected?
The EFS says collection and distribution continue without interruption.
Who is behind the attack?
Nobody knows. No claim of responsibility is reported and investigators have named no one.
Method and limits
Sources as of November 5, 2026. We could not read the EFS or Health Ministry statements directly: we cite them as relayed by CBS News (AP), CNBC and other outlets, and the NBC News (AP) page could not be opened in full. Temperatures come from the press and are not confirmed by the EFS. We tested nothing.
Sources
- CBS News (AP): Blood banks hit by cyberattack in France days after European freezer hacks (verified 2026-11-05)
- NBC News (AP): Cyberattack on French blood bank fridges thwarted before damage (verified 2026-11-05)
- CNBC: Blood banks targeted in latest European fridge cyberattacks (verified 2026-11-05)
- Cyber Security News: Hackers hijacked French blood plasma freezers (verified 2026-11-05)
- technology.org: Cyberattack hits French blood bank cold storage (verified 2026-11-05)
- AP via NY1: freezers at supermarkets in several European countries (verified 2026-11-05)
- OCCRP: Hackers turn French supermarket refrigerators into furnaces (verified 2026-11-05)
- Solutions Numériques: supermarket fridges sabotaged (verified 2026-11-05)
Spotted an error in this article? Report it · Our corrections policy
