Hackers Target French Blood Banks Through Refrigeration Systems

Cyberattacks targeting refrigeration systems across Europe have extended beyond supermarkets to France's national blood supply network, where hackers manipulated temperature controls at three storage facilities on Monday, November 2, 2026. The French Blood Establishment (EFS) confirmed Wednesday that monitoring systems and emergency interventions prevented damage to blood products and medical samples.

The compromised refrigeration units belonged to external equipment providers rather than directly operated EFS systems. The affected facilities stored plasma for transfusions, materials used in pharmaceutical manufacturing, and samples intended for biological research, according to the organization.

The attackers remotely altered temperature and defrost settings, raising them to dangerously high levels. French weekly newspaper Le Canard Enchaîné reported that one storage unit normally maintained at minus 30 degrees Celsius (minus 22 degrees Fahrenheit) reached 110 degrees Celsius (230 degrees Fahrenheit).

In its statement, EFS described the manipulation of the refrigeration controls.

"Specifically, temperature and defrost thresholds were set to excessively high levels," the French Blood Establishment said.

The organization explained that the affected equipment supported the preparation and distribution of blood products before their delivery to healthcare facilities. It also held samples for EFS biobanks.

"These cold storage units—located at EFS preparation and distribution sites—are used to store blood products prior to their delivery to healthcare facilities, as well as samples intended for EFS biobanks," EFS said.

Rapid detection prevented the incident from disrupting the country's blood supply. Staff either secured the affected equipment or removed compromised units from operation, transferring samples and products to alternative facilities when necessary.

"No health consequences have been identified, and no blood products were lost," EFS said.

The organization also confirmed that its monitoring systems identified the abnormal temperature changes before stored materials were affected.

"Monitoring and alarm systems quickly detected the anomalies, allowing staff to take action to ensure that no blood products or samples were compromised," EFS said.

Blood collection and distribution continued without interruption, according to the organization. French authorities are coordinating the response through the National Cybersecurity Agency (ANSSI) and the Health Ministry.

The French Health Ministry said the affected facilities remained under control and that precautionary measures protected the country's blood supplies.

"Several regional facilities of the French Blood Establishment (EFS) were affected by a cybersecurity incident that impacted certain cold storage room monitoring and control systems," the ministry said.

The ministry also confirmed that existing monitoring and alarm arrangements helped preserve the safety of stored blood products.

"The safety of the blood supplies was preserved thanks to the facilities' monitoring and alarm systems, as well as precautionary measures immediately implemented," the ministry said.

The refrigeration equipment supplier, Coolworld, acknowledged the incident and said the reported weakness involved technology provided by an outside supplier.

"The vulnerability currently being reported in the media relates to a component from a third-party supplier and was outside Coolworld's direct control," Coolworld said.

The company indicated that only a limited number of refrigeration units were affected and that it was responding to the incident.

"The vulnerability currently being reported in the media relates to a component from a third-party supplier and was outside Coolworld's direct control," the company said.

Coolworld also confirmed its response to the security incident.

"Appropriate measures," the company said when describing its response.

The attacks on blood storage facilities followed a wider wave of incidents involving supermarket refrigeration systems in France, Belgium, Sweden and Finland. Hundreds of stores experienced unauthorized changes to refrigerator and freezer settings, resulting in substantial quantities of spoiled food and financial losses estimated at millions of euros.

The incidents resemble an earlier attack in mid-October that affected hundreds of supermarkets and independent retailers in France, Belgium and the Netherlands. One affected retailer, Dutch supermarket operator Ahold Delhaize, estimated that the disruption could reduce fourth-quarter sales by as much as 250 million euros ($281 million) and operating income by up to 100 million euros.

Chief Executive Franz Muller described the continuing operational impact in the company's earnings statement.

"While most of the disruption was contained within two weeks, work continues to fully restore our normal operations," Muller said.

He also addressed the broader business implications of the incident.

"Cyber threats are an increasingly harsh reality of doing business today," Muller said.

The attacks have also raised questions about the security of internet-connected household appliances. Cybersecurity specialists interviewed by CBS News warned that refrigerators, televisions, cameras, heating systems and electronic door locks could expose households to similar vulnerabilities.

Dr. Manny Niri, a cybersecurity lecturer at Oxford Brookes University, said consumers should recognize that connected appliances function like other internet-enabled computers.

"Our homes may be more vulnerable than many people think. Smart fridges, TVs, cameras, and locks are small computers connected to the internet, and like any computer, they can have weaknesses," Niri told CBS News.

He identified weak account protection and outdated software as common security problems.

"Often the problem is simple: default or reused passwords, old software, or accounts with weak security," Niri said.

Professor George Loukas, head of the Centre for Sustainable Cyber Security at the University of Greenwich, warned that a vulnerability in a widely distributed appliance could affect numerous households.

"One flaw in a popular model opens the door to every home that owns it," Loukas said.

He explained that unauthorized access could allow attackers to misuse functions already available through legitimate device applications.

"Anything the device is already allowed to do," Loukas said when describing the potential scope of malicious control.

Loukas added that compromised systems could create physical safety risks when attackers manipulate heating, door locks or surveillance equipment.

"If an app can turn off your heating, unlock your door or switch off your camera, so can a hacker. The physical harm comes from using the system as designed, just with malicious intent and controlled by someone other than you," he said.

Niri warned that compromised cameras and microphones could expose private household activities.

"Unauthorized access to a camera or microphone could reveal when people are at home, what they are doing and, potentially, their conversations," he said.

He also described the possibility of attackers using one compromised appliance to access other connected devices.

"A compromised device can sometimes give hackers access to other devices on the same network, potentially exposing personal or financial information. There can also be physical consequences, for example changing a fridge temperature, interfering with an alarm system, or opening a smart lock," Niri said.

Dr. Abdullahi Arabo, an associate professor of cyberscience and network security at the University of the West of England, similarly warned about risks spreading across connected household networks.

"A compromised device can sometimes give hackers access to other devices on the same network, potentially exposing personal or financial information," Arabo said.

Security specialists also pointed to the possibility of large-scale attacks involving identical devices. In 2016, the Mirai malware infected hundreds of thousands of internet-connected devices, including routers and security cameras, creating a network used to launch widespread cyberattacks.

Loukas warned that artificial intelligence could make comparable operations easier to organize.

"With AI, an attack that once needed a skilled team working for weeks can now be run by one person," he said.

He highlighted the potential consequences of vulnerabilities affecting widely distributed products.

"When millions of homes rely on the same device, a single flaw becomes everyone's problem," Loukas said.

Niri advised consumers to remain alert rather than assume that every connected appliance would become a target.

"I suggest awareness, not fear," he said.

He encouraged consumers to consider whether internet connectivity was necessary before purchasing smart appliances.

"Comfort has a cost. Before buying a smart device, we should ask, 'Do I really need this to be online, and what happens if it is hacked?'" Niri said.

His recommendations include replacing default passwords, enabling two-factor authentication where available, installing software updates regularly and maintaining manual controls for essential household systems.

In the United States, cybersecurity officials identified a serious vulnerability in certain Wi-Fi thermostats in 2025 that could potentially give attackers administrative control. The Federal Trade Commission has also documented incidents involving unauthorized access to Ring security cameras.