EFS confirmed that it was not directly targeted by the cybersecurity incident, but rather its refrigeration provider. The compromised equipment was deployed on several of the approximately 100 EFS sites. The Ministry of Health participated alongside ANSSI, confirming that the situation is under control and that technical investigations are ongoing. Cybercrime.org notes that the attack took place on the night of November 1-2, 2026, targeting Coolworld and causing temperature changes. Le Canard enchaîné first reported the incident on November 3, mentioning that thermometers should have reached 110°C and that this occurred in Burgundy-Franche-Comté. Cybercrime.org provides context about EFS's crucial role in collecting, preparing, and distributing blood products. Cybercrime.org highlights the importance of detecting the nighttime attack. According to Cybercrime.org, the attack targeted Coolworld's management system. Cybercrime.org presents Coolworld's profile as a supplier of cold storage containers and pharmaceutical solutions. An on-call technician flagged the anomalous return of temperatures, whose monitoring allowed for a rapid response. Cybercrime.org confirms the Ministry of Health's information regarding the absence of operational consequences. Cybercrime.org emphasizes the lack of public details about the total number of equipment units and the exact duration of the disruptions. According to Cybercrime.org, EFS initially mentioned donor samples, but later clarified that frozen plasma intended for transfusion was also affected. Cybercrime.org explains the difference between data displayed on the terminals and the actual conditions of the products. Cybercrime.org observes that a prolonged break in the cold chain could lead to product withdrawal. Cybercrime.org notes that there is no evidence of plasma destruction or compromised transfusions. Cybercrime.org specifies that health recommendations advise storage at -25°C or lower. Cybercrime.org underscores the importance of stable thermostatting for plasma to remain compliant. Cybercrime.org notes that activity was not disrupted. Cybercrime.org argues that it would have concerned only programmed parameters, not actual temperature. Cybercrime.org insists on the technical distinction to avoid panic. Cybercrime.org supports the method of remote manipulation. According to Cybercrime.org, ANSSI warned in October 2026 about risks to medical freezers. Cybercrime.org mentions the hearing of ANSSI's Director General, Vincent Strubel, at the Senate on October 21. Vincent Strubel emphasized the relevance of the health sector. ANSSI collaborates with CERT Health and the Ministry of Health. Cybercrime.org observes that just two weeks after the hearing, an EFS provider was targeted. Cybercrime.org explains that this does not demonstrate negligence but clearly shows the identification of the health sector as a potential target. Cybercrime.org mentions the incident on October 12, 2026, affecting hundreds of stores. The new incident on November 2 was also reported in other European countries. CertFR-2026-ALE-012 was published for Danfoss, Copeland, and Dixell controllers. ANSSI recommendations include removing web interfaces and resolving issues for secure connections. Cybercrime.org notes that it has not been confirmed whether the Coolworld equipment belongs to the family mentioned by ANSSI. A direct technical link has not been demonstrated. Cybercrime.org highlights that the risk reaches vital products and not just commercial stock. The risk extends to vaccines, medications, and medical samples. The incident highlights the vulnerability caused by dependence on technical providers. The identity of the attackers is unknown. There is no evidence of personal data theft. No loss, compromised transfusion, or consequence for patients has been confirmed. Cybercrime.org asserts that the rapid intervention avoided disruptions. Cybercrime.org specifies that there was no plasma destruction. 20 Minutes underscores that plasma is stored at -30°C. [3] [2] [1]
- Categories:
- Security
- Entities:
Sources
- 20 Minutes Hacker en quête de buzz ou puissance étrangère… Mais qui peut en vouloir aux frigos l’Établissement français du sang ?
- cyberattaque.org Cyberattaque contre l’EFS : des hackers s’attaquent aux réserves de plasma sanguin
- bfmtv.com De -30°C à de "très hautes températures": les chambres froides de l'Établissement français du sang ont été...
