🔍 Read the full analysis: A Hacker's Attempt To Reach A Blood Bank's Plasma Freezers Met An Alarm on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
France’s national blood service, the EFS, said a cybersecurity incident involving a refrigeration contractor’s systems affected cold-room controls at three sites overnight on Nov. 1–2. Monitoring alarms and an on-call technician detected rising temperatures, and staff moved the plasma; EFS reports no health impact or loss of blood products. A reported 110°C was a controller setting, not a measured temperature.
France’s national blood service said a cybersecurity incident affected the supervision and control systems for cold rooms at three sites overnight from Nov. 1 to Nov. 2, prompting staff to move stored plasma after alarms detected anomalies. The Établissement français du sang (EFS) reports no health impact and no loss of blood products; the widely reported 110°C figure was a programmed setting, not a measured room temperature.
In a statement issued Nov. 3, the EFS said a refrigeration equipment contractor had been the victim of a cybersecurity incident. The affected systems supervised and controlled cold rooms at three EFS sites. According to the service, temperature and defrost thresholds were raised to very high settings. The EFS statement did not give a specific number or identify the contractor.
The rooms contained plasma intended for transfusion and plasma for fractionation, a process used to make medicines. EFS monitoring and alarm systems detected the anomalies quickly, the organization said. Equipment was brought under control or switched off, and the contents were moved to other installations as a precaution. The EFS said it had identified no health impact and reported no loss of blood products.
Le Canard enchaîné reported that the controls were reset to 110°C and identified the contractor as Coolworld. Those details were repeated by other outlets, but the EFS did not confirm them in the statement described by the source material. Coolworld had not commented publicly as of Nov. 4, and the EFS said it was not directly targeted, according to the report. The 110°C value was a target entered into a controller; no source cited in the reporting said a room actually reached that temperature.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
Why Plasma Temperature Controls Matter
The incident exposed a risk to a sensitive part of the health supply chain: plasma must remain frozen to preserve it for transfusion or medicine production. The reporting says fresh frozen plasma is stored at −25°C or colder, while the affected rooms were reportedly set to run at about −30°C. A genuine rise above safe limits could put stored material at risk, even if the extreme controller setting itself was never reached.
In this case, the EFS says alarms and a human response helped prevent reported losses. That outcome shows why cold-storage protection cannot depend only on the system that controls refrigeration. Independent monitoring, staff available to respond and a way to relocate stock can limit harm when equipment or remote access is compromised. The EFS said it had increased temperature monitoring across its equipment while teams worked with national cybersecurity and health authorities.
The incident also matters because it involved a contractor’s remote supervision system, rather than a confirmed direct attack on the blood service itself. Third-party maintenance links can connect external systems to operational equipment. The available account does not establish how the access was obtained or whether the incident was part of a wider campaign, so broader conclusions about coordination remain unconfirmed.
Products Worth Considering
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
Samsung Odyssey G4 25-inch FHD Gaming Monitor
Apple MacBook Air 15-inch with M5 chip, 16GB Memory, 512GB SSD, and Liquid Retina Display
As an affiliate, we earn on qualifying purchases.
The Contractor Link and Same-Night Attacks
The EFS is France’s national blood service, collecting donations and supplying hospitals. Its Nov. 3 statement, as reported by franceinfo and Next on Nov. 4, described a cybersecurity incident affecting a contractor’s equipment and control installations at three sites. The agency did not publicly name the locations in the statement described by the source. Le Canard enchaîné reported that one site was in Bourgogne-Franche-Comté; the other two were not identified in the source material.
The blood-service incident occurred on the same night as a second wave of attacks affecting supermarket refrigeration systems in multiple European countries. The source material says at least 11 countries were affected. No authority has linked the incidents, and the timing alone does not establish a connection. Two groups describing themselves as pro-Russian later claimed the supermarket attacks in a video, but that claim was unverified, the posts were deleted, and no government had attributed the attacks to anyone as of Nov. 4.
Online descriptions of “boiled blood” misstate what is known. The reported 110°C was a controller setpoint, not a recorded temperature. The reporting says the actual concern was whether plasma might thaw if a cold room warmed too far. The source material does not provide a measured peak temperature for the EFS rooms.
““The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.””
— The Établissement français du sang, in its Nov. 3 statement
What the Incident Report Leaves Open
The public account does not identify the contractor in the EFS statement, explain how the intruder reached the remote supervision system, or describe what security controls were bypassed. Coolworld was named by Le Canard enchaîné, but the source material says the company had not publicly commented by Nov. 4. The EFS has not publicly identified two of the three affected sites in the reporting cited here.
There is also no reported measurement of the rooms’ highest temperatures, no public timeline of how long the controls were affected, and no detailed account of which plasma stock was moved or how it was assessed. The EFS says there was no product loss or identified health impact; the available material does not include a separate technical investigation or independent confirmation of the incident’s full scope.
Finally, the overlap with supermarket refrigeration attacks remains a timing coincidence in the confirmed record. The supermarket attackers’ claimed identity is unverified, and no authority has publicly connected those attacks to the EFS incident.
Monitoring and Cybersecurity Review
The EFS said its technical teams were working with France’s national cybersecurity agency, ANSSI, and the health ministry. It also said temperature monitoring across its equipment had been stepped up. The available reporting does not give a timetable for that work or say whether investigators have identified the person responsible.
Further details may come from the EFS, the relevant authorities or the refrigeration contractor, including clarification of the affected sites, the access route and the recorded temperatures. Until such information is released, the confirmed outcome remains that alarms triggered a response, the plasma was moved as a precaution, and the EFS reported no product loss or health impact.
Key Questions
Did the plasma reach 110°C?
No. The 110°C figure was reportedly a controller setting, not a measured temperature. The source material gives no recorded peak temperature for the EFS rooms.
Was any plasma lost or anyone harmed?
The EFS reported no loss of blood products and no identified health impact. It said the contents were moved to other installations as a precaution.
Who was responsible for the refrigeration system?
The EFS statement described the affected equipment as belonging to a refrigeration contractor but did not name the company. Le Canard enchaîné identified Coolworld; the source material says the company had not publicly commented by Nov. 4.
Was this connected to the supermarket refrigeration attacks?
No connection has been established. The incidents happened on the same night, but no authority had linked them as of Nov. 4. Claims by groups about the supermarket attacks were unverified.
What happens now?
EFS technical teams are working with ANSSI and the health ministry, and the service says it has increased monitoring of temperatures across its equipment. The public account does not provide a timetable for the review.
Source: ThorstenMeyerAI.com
