French Blood Banks: Cyberattack Targets Plasma Storage

European critical infrastructure faced a new digital threat this week when hackers targeted cold-storage systems at three French blood bank sites.

The French Blood Establishment, known as EFS, reported that intruders attempted to push plasma storage temperatures from their normal level of minus 22 Fahrenheit to as high as 230 Fahrenheit. The attack targeted refrigeration equipment supplied by Coolworld at locations storing plasma bags for transfusions and plasma used in medicine manufacturing. EFS monitoring systems detected the extreme temperature shifts on Monday, allowing staff to secure or transfer the affected inventory before damage occurred. A statement released late Tuesday confirmed that no blood products or samples were compromised and that no health consequences were identified for patients.

Le Canard Enchaîné, a French weekly newspaper, was the first to report the specific details of the temperature manipulation. The EFS said that blood collection and distribution operations remained uninterrupted, ensuring that hospitals and healthcare facilities continued to receive the supplies they need. The incident highlights a specific vulnerability in the supply chain for medical refrigeration. Coolworld, the equipment provider, acknowledged the cybersecurity incident in a statement. The company noted that the flaw involved a component from a third-party supplier and was outside its direct control. It stated that only a limited number of units were affected and that it is taking appropriate measures to address the issue.

France's national cybersecurity agency and the Health Ministry are currently investigating the breach. The Health Ministry has not yet indicated who might be responsible for the attack. This incident follows a similar wave of cyberattacks in mid-October that targeted fridges and freezers at hundreds of supermarkets and independent stores across France, Belgium, and the Netherlands. Those earlier hacks resulted in spoiled food and significant financial losses for retailers.

Dutch supermarket chain Ahold Delhaize, which was hit in the October incident, released earnings data on Wednesday. The company estimated that the cyberattack would reduce its fourth-quarter sales by as much as 250 million euros, or 281 million dollars. Operating income for the period is expected to drop by approximately 100 million euros, or 112 million dollars. Franz Muller, the CEO of Ahold Delhaize, stated that while most disruptions were contained within two weeks, work continues to fully restore normal operations. The company had previously attributed the October incident to malicious actions and had proactively taken some systems offline, including websites and apps for its European and American brands.

The EFS said the plasma involved in the recent attack was either transferred to secure locations or protected on-site. The organization confirmed that no products were lost in the process. The investigation by French authorities is ongoing as they seek to determine the extent of the vulnerability and the identity of the actors involved.