Overnight between November 1 and November 2, 2026, hackers targeted refrigeration service providers supporting the French Blood Establishment (EFS), attempting to sabotage critical medical supplies by remotely spiking storage temperatures from minus 30 degrees Celsius to 110 degrees Celsius.
Hackers Target Cold Storage at French Blood Banks
The targeted facilities stored frozen plasma for transfusions, plasma used to manufacture medicinal products, and samples intended for EFS biobanks.
No health consequences have been identified, and no blood products were lost,
the EFS
Staff took immediate action to bring equipment under control, take affected units offline, or transfer vulnerable blood products and samples to secure alternative facilities. The French Ministry of Health confirmed that distribution operations and blood collection remained uninterrupted, noting that remote access to the affected refrigerators was disabled.
Suppliers Trace Vulnerabilities as Europe Confronts Refrigeration Attacks
Coolworld released a statement noting that the exploited vulnerability stemmed from a component provided by a third-party supplier, which operated outside of Coolworld’s direct control. The company added that only a limited number of units experienced issues and appropriate remedial measures were underway. France’s national cybersecurity agency (ANSSI) and the Ministry of Health launched an investigation into the incident, with ANSSI providing support and maintaining regular dialogue with European counterparts.
Overnight between November 1 and November 2, 2026, hackers targeted commercial refrigeration systems across supermarkets in multiple European countries, including France, Germany, Italy, Romania, Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands, and Sweden.
The blood bank breach followed a rolling wave of cyberattacks against grocery stores. Those incidents caused refrigeration units to soar as high as 50 degrees Celsius (122 degrees Fahrenheit), ruining large quantities of frozen food and creating millions of euros in damages. In October, a separate wave of attacks targeted cooling units at roughly 700 supermarkets across France, leaving older refrigeration systems and software that lacked security updates particularly exposed.
Retail fallout from the October incidents proved severe. Dutch supermarket operator Ahold Delhaize reported that the October cyberattack would reduce its fourth-quarter sales by as much as €250 million ($281 million) and crimp operating income by up to €100 million.
European Authorities Convene Urgent Consultations
Following emergency discussions held by national authorities and EU officials, the bloc’s agencies engaged in urgent talks to coordinate a collective response to the cyber incidents. These are not isolated incidents and of course we have to be collectively resilient and prepared for such cyber incidents,
Regnier said.
Earlier coverage: Suspected Cyberattacks Target Supermarket Refrigeration Systems Across Europe
