French authorities have successfully thwarted a cyberattack that targeted the refrigeration systems of three French Blood Establishment (EFS) sites, preventing any compromise to blood products or samples. The incident, which occurred on Monday, saw attackers attempt to raise storage temperatures to extremely high levels.
According to a statement from the EFS, "temperature and defrosting thresholds were raised to extremely high levels" for plasma storage. While the weekly newspaper Le Canard Enchaîné reported the temperature was raised to 110 C (230 F) from the usual minus 30 C (minus 22 F), the EFS confirmed that "no health consequences have been identified, and no blood products were lost." The affected products were either transferred or secured, and monitoring systems quickly alerted staff to the anomalies.
This cyberattack impacted a supplier of refrigeration equipment used at the EFS sites. The equipment supplier, Coolworld, acknowledged the cybersecurity incident, stating that the vulnerability related to a third-party component outside of their direct control. They indicated that a limited number of units were affected and appropriate measures are being taken.
The EFS has stated that blood collection and distribution operations remain uninterrupted, ensuring continued services for patients. France's national cybersecurity agency and the Health Ministry are investigating the incident.
The attack on the blood banks follows a series of similar cyber incidents targeting refrigeration systems in supermarkets across Europe. In mid-October, hundreds of supermarkets and stores in France, Belgium, and the Netherlands experienced disruptions when their fridges and freezers were remotely compromised. One affected Dutch supermarket chain, Ahold Delhaize, estimated the cyberattack would reduce its fourth-quarter sales by up to 250 million euros ($281 million).