🔍 Read the full analysis: A Nighttime Hack, A Blood Bank, And The Alarm That Responded on ThorstenMeyerAI.com
Get business pricing on monitors, keyboards and dev gear
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
France’s national blood service, the EFS, said a cybersecurity incident involving a refrigeration contractor affected cold-room monitoring and controls at three sites overnight from Nov. 1 to 2. Alarms and an on-call technician detected rising temperatures, and plasma was moved; the EFS reported no health impact or loss of blood products. A reported 110°C was a controller setting, not a measured temperature.
France’s national blood service said a cybersecurity incident involving a refrigeration contractor altered cold-room monitoring and control settings at three EFS sites overnight from Nov. 1 to 2, prompting alarms and the transfer of stored plasma. The EFS reported no health impact and no loss of blood products; reports that a controller was set to 110°C do not mean the rooms reached that temperature.
In a statement issued Nov. 3 and quoted by French media, the Établissement français du sang (EFS) said a contractor involved in refrigeration equipment had suffered a cybersecurity incident. The affected systems supervised and controlled cold rooms at three EFS sites. The service said temperature and defrost thresholds had been raised to very high levels, but did not give a specific figure in its statement.
According to the EFS, its monitoring and alarm systems identified the anomalies quickly. An on-call technician also noticed a temperature rise during the night, according to reporting by Le Canard enchaîné. The equipment was brought under control or switched off, and the contents were moved to other installations as a precaution. The rooms held frozen plasma for transfusions and plasma intended for fractionation, a process used to make medicines.
Le Canard enchaîné reported that the controller setting was raised from a target of about −30°C to +110°C, and named the contractor as Coolworld. Those details have not been confirmed in the EFS statement. The source report says Coolworld had not commented publicly and that the EFS said it was not directly targeted. The EFS reported that no blood products were lost; the health ministry was quoted as saying there was no operational consequence because the situation was detected.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
Alarms Protected Stored Plasma
The incident put a temperature-sensitive medical supply at risk, even though the EFS says the response prevented reported product loss. Frozen plasma must remain cold to preserve its intended use. The relevant concern was whether the rooms would warm enough to compromise the products, not whether they would reach the controller’s extreme target.
The episode also shows how a third party’s remote access can affect equipment supporting essential services. In this case, independent monitoring, an on-call response and the ability to move stock helped limit the consequences. The EFS said temperature monitoring across its equipment had been stepped up while technical teams worked with France’s national cybersecurity agency, ANSSI, and the health ministry.
The event occurred on the same night as a reported second wave of attacks on supermarket refrigeration systems in several European countries. That timing may prompt questions about risks to cold-storage operations, but no authority has linked the blood-service incident to those attacks. The two events should not be treated as a coordinated campaign on the available evidence.
Popular right now
Philips Café Aromis Automatic Espresso Machine with LatteGo Pro Milk System
Apple AirPods Max 2 Wireless Over-Ear Headphones – Midnight
Hisense 65-inch U6 Pro Mini-LED 4K UHD Smart Fire TV
As an affiliate, we earn on qualifying purchases.
What the 110°C Setting Means
The EFS is France’s national blood service, which collects donations and supplies hospitals. Its public statement described very high changes to temperature and defrost thresholds but did not publish the 110°C figure. That number comes from Le Canard enchaîné’s reporting, repeated by other outlets, rather than from a reported measurement inside a cold room.
A controller setpoint is a target entered into a system, not proof that equipment or its contents reached that temperature. The source material reports no measured temperature of 110°C. It describes the practical hazard as a rise above the storage range: European guidance summarized by the International Society of Blood Transfusion says fresh frozen plasma is stored at −25°C or colder.
The blood-service incident also overlapped in time with attacks on supermarket refrigeration. The source material says those attacks affected at least 11 European countries and that two groups describing themselves as pro-Russian later claimed responsibility in a video. The claims were unverified, the posts were deleted, and no government had attributed the supermarket attacks to a perpetrator. No link between those incidents and the EFS case has been established.
“The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.”
— Établissement français du sang, statement of Nov. 3
The Intrusion’s Scope Remains Unknown
The EFS has not publicly identified the refrigeration contractor or disclosed the specific settings changed, the method of access or the attacker. Coolworld was named by Le Canard enchaîné, not by the EFS in its statement, and the source material says the company had not commented publicly. The EFS said it was not directly targeted, according to that reporting.
Only one affected region, Bourgogne-Franche-Comté, was identified in the cited reporting; the other two sites were not made public. The EFS has not disclosed measured temperatures at the sites or provided a detailed timeline of how long the settings were altered. The reported 110°C figure is a controller setting, and no source cited here says the rooms reached it.
Investigators have not publicly established who accessed the system or whether the incident was connected to the separate supermarket refrigeration attacks. The latter attacks’ online claims of responsibility remain unverified. At present, there is no confirmed connection between the events.
Monitoring and Investigation Continue
The EFS said its technical teams were working with ANSSI and the health ministry and that temperature monitoring across its equipment had been increased. The service has not announced a public timetable for the technical review or said when it will release further findings.
Further updates may clarify how the contractor’s remote supervision system was accessed, which sites and equipment were affected, and what safeguards will change. For now, the confirmed public account is limited: alarms detected abnormal settings, staff moved the stored products, and the EFS reported no health impact or product loss.
Key Questions
Did the blood plasma reach 110°C?
No such measured temperature has been reported. The 110°C figure described by Le Canard enchaîné was a controller target, not a recorded room or product temperature.
Was any plasma lost or anyone harmed?
The EFS reported no health impact and no loss of blood products. It said the contents were moved to other installations as a precaution.
How many EFS sites were affected?
The EFS said the affected monitoring and control installations were at three sites. The cited reporting identified Bourgogne-Franche-Comté, but did not name the other two locations.
Who was responsible for the incident?
No attacker has been identified publicly. Le Canard enchaîné named a refrigeration contractor, but the EFS did not name it in its statement. No authority has linked the incident to the separate supermarket attacks.
Source: ThorstenMeyerAI.com
