🔍 Read the full analysis: The Night A Blood Bank's Freezer Alarm Flagged A Hacker's Move on ThorstenMeyerAI.com
Prime made for students and young adults
- Fast, free delivery for dorm and study essentials
- Prime Video and Amazon Music included
- Member-only deals
TL;DR
France’s national blood service, EFS, said a cybersecurity incident affecting a refrigeration contractor’s remote supervision systems raised cold-room settings at three sites overnight on Nov. 1–2, 2026. Monitoring alarms alerted staff, who moved plasma to other equipment; EFS reported no health impact or loss of blood products. A reported setting of 110 °C was not a measured temperature.
France’s national blood service, the Établissement français du sang (EFS), said a cybersecurity incident involving a refrigeration equipment contractor affected cold-room supervision and controls at three sites overnight from Nov. 1 to Nov. 2, putting stored plasma at potential risk. EFS said its alarms detected abnormal settings, staff moved the products as a precaution, and no health impact or loss of blood products was reported.
In a statement issued Nov. 3 and cited by French media, EFS said the incident affected installations used to supervise and control cold rooms at three of its sites. Temperature and defrost thresholds had been raised to very high levels. The service did not identify the contractor or provide a numerical setting in its statement. It said the affected rooms held plasma for transfusion and plasma intended for fractionation, a process used to make medicines.
According to reporting by Le Canard enchaîné, later cited by other French outlets, the contractor was Coolworld and the cold-room controllers were reportedly set to +110 °C, although the rooms were intended to operate at about −30 °C. EFS has not publicly confirmed those details, and the contractor had not commented in the material provided. The 110 °C figure refers to a programmed target, not a recorded room temperature; no source cited here reports that the rooms reached it.
EFS said its monitoring and alarm systems identified the abnormal settings quickly. The equipment was brought under control or switched off, and the contents were transferred to other installations as a precaution. The service said technical teams were working with France’s national cybersecurity agency, ANSSI, and the health ministry, while temperature monitoring across EFS equipment was increased.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
How Alarms Protected Plasma Stocks
The incident shows how a cyber event affecting an outside supplier can create a physical risk for healthcare operations, even when the affected organization is not said to have been directly targeted. Plasma must remain frozen within strict storage limits. If temperatures rise enough to compromise products, the consequences could include unusable supplies and disruption to treatment or medicine production.
In this case, EFS reported no product loss and no health impact. Its account points to independent monitoring, an on-call response and the ability to move stock as safeguards that helped contain the incident. Those measures matter because remote maintenance access can connect a contractor’s systems to equipment on which hospitals and patients depend. The available information does not establish how the attacker gained access or whether the contractor’s system was the only point involved.
The episode occurred on the same night as a second wave of attacks on supermarket refrigeration systems reported in at least 11 European countries. That timing makes the events relevant to wider concerns about cold-chain security, but no authority has linked the incidents. They should not be treated as one coordinated operation based on the information available.
Products Worth Considering
LG UltraGear 27GX704A-B 27-inch QHD OLED Gaming Monitor
Samsung 34-Inch Odyssey G5 Ultra-Wide Curved Gaming Monitor
EcoFlow Delta 3 Portable Power Station – 1024 Wh, 1800 W
As an affiliate, we earn on qualifying purchases.
What EFS Has Confirmed So Far
EFS is France’s national blood service, collecting donations and supplying hospitals. Its public statement described a cybersecurity incident at a refrigeration equipment contractor and effects on control and supervision installations at three EFS sites. It said the temperatures and defrost thresholds had been changed to very high levels, but did not identify the contractor, publish the specific setting or name all three locations.
The more specific account comes from Le Canard enchaîné, which reported that Coolworld was the contractor and that a controller had been set to 110 °C. Those details remain attributed to the newspaper rather than confirmed in EFS’s statement. The supplied reporting identifies Bourgogne-Franche-Comté as one affected region; the other two sites have not been made public in the material available.
Reporting also distinguishes the setting from the temperature reached. A controller’s target can be changed without the room attaining that temperature. The source material gives no measured peak temperature for the EFS rooms, so claims that plasma was heated to 110 °C are unsupported. The relevant concern is whether stored plasma could thaw or otherwise leave its required frozen conditions.
““The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.””
— Établissement français du sang, statement issued Nov. 3
Details Still Under Investigation
Several key details remain unconfirmed publicly. EFS has not named the contractor, disclosed the controller setting or identified all three affected sites. The identification of Coolworld and the reported 110 °C setting come from Le Canard enchaîné and subsequent reporting, not from the EFS statement described in the source material. Coolworld had not commented publicly in that material.
It is also unclear how the remote system was accessed, who was responsible, how long the altered settings remained in place, and what temperatures the rooms actually reached. EFS reported that the stock was moved and no products were lost, but the available account does not provide a technical incident report or describe any forensic findings. No government attribution of the incident is provided.
Two groups that describe themselves as pro-Russian claimed the separate supermarket refrigeration attacks in a video, according to the source material. That claim is unverified, the posts were later deleted, and no government has attributed those attacks to anyone. No authority has linked those attacks to the EFS incident.
EFS and Agencies Review Access
EFS said its technical teams were working with ANSSI and the health ministry and that temperature monitoring across its equipment had been stepped up. The service has not announced a timetable for completing the investigation or said whether it will publish further technical findings.
Further information may clarify the contractor’s role, how the remote access was used and whether any additional equipment or sites were affected. For now, the confirmed public account is limited: controls at three sites were affected, alarms detected anomalies, staff moved the products, and EFS reported no health impact or loss. Any stronger conclusion about the attacker, motive or connection to the supermarket incidents remains unestablished.
Key Questions
Did the blood plasma reach 110 °C?
No evidence in the cited reporting says it did. The 110 °C figure was reportedly a controller setting, not a measured temperature. The actual peak temperature in the rooms has not been disclosed.
Were any blood products lost?
EFS said no blood products were lost. It said staff moved the contents to other installations as a precaution after monitoring systems detected abnormal settings.
How many EFS sites were affected?
EFS said control and supervision installations at three sites were affected. The source material identifies Bourgogne-Franche-Comté as one region, while the other locations have not been publicly identified there.
Was the incident connected to attacks on supermarket refrigeration?
No connection has been established. The incidents occurred on the same night, but the source material says no authority has linked them. Claims about responsibility for the supermarket attacks remain unverified.
What is being done after the incident?
EFS said it was working with ANSSI and the health ministry and had increased temperature monitoring across its equipment. The public material does not give a date for completion of the investigation or describe its technical findings.
Source: ThorstenMeyerAI.com
