Cyber-attack hits French blood storage, but no damage reported
Attackers raised temperature settings at three sites belonging to France’s blood supply service.
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
.jpg){kind=link}
A cyber-attack hit the cooling systems at three sites belonging to France’s blood supply service on Monday. According to the French blood-supply organisation EFS, no blood products were lost and no health effects have been identified.
The attack targeted a refrigeration-equipment supplier used by the Établissement français du sang (EFS). According to the EFS, temperature and defrost thresholds at three plasma-storage sites were set to very high levels. The US news agency AP reported on the EFS statement.
According to the EFS, the affected plasma was intended for transfusions and for the production of medicines. The organisation says alarm systems quickly detected the anomalies. Staff transferred or secured the products, according to the EFS, meaning that no blood products or samples were affected, the organisation says.
The EFS has not said who was behind the attack and has given no motive. It is unclear which technical vulnerability at the supplier may have been exploited. French reports about an exact temperature setting have not been confirmed by the EFS itself; the official statement refers only to very high configured thresholds.
The attack follows earlier incidents in which refrigerators and freezers at supermarkets in several European countries were remotely made warmer. AP reported that food was lost as a result. The series shows that temperature-management systems pose not only a logistical or consumer risk, but can also affect components of vital healthcare chains.
For Dutch hospitals and blood banks, the security of suppliers and connected building systems is particularly relevant. There is no indication that Dutch blood supplies were affected by this incident. The available information suggests that detection and manual intervention limited the damage in France, but says nothing yet about the attackers’ identity or the campaign’s wider scale.
Also show where in Europe and in the world
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The article’s central claim is based on a statement by the EFS and independent reporting by AP and Euronews. Unconfirmed details about the exact temperature, perpetrator and vulnerability used are explicitly presented as uncertain.
- confirmed A cyber-attack hit a supplier to France’s blood supply service on 2 November. — The EFS confirmed the incident; AP and Euronews report the same date and circumstances. source
- confirmed Three plasma-storage sites were affected. — This appears in the EFS statement as reported by AP and Euronews. source
- confirmed No blood products were lost and no health effects have been identified. — The EFS explicitly reports this. source
- confirmed The attackers’ identity and motive have not been disclosed. — The sources consulted name neither a perpetrator nor a motive. source
Editor's note
It is certain that an EFS supplier was attacked on 2 November and that three sites were affected. The EFS reports no loss of blood products; the perpetrator, vulnerability and exact temperature settings have not been officially disclosed.Sources
More on this in Dutch media
- NOS — „cyberaanval bloedvoorziening”
- Het Parool — „cyberaanval bloedvoorziening”
- Trouw — „cyberaanval bloedvoorziening”