Three sites of the Établissement français du sang (EFS) have been targeted in a cyberattack against their refrigeration installations. Attackers modified temperature and defrost parameters without causing any loss of plasma.
EFS Avoids Catastrophe
The Établissement français du sang confirmed an intrusion affecting the refrigeration equipment of three of its sites. The attackers manipulated temperature setpoints and defrost settings in cold chambers used to store plasma. Rapid intervention by EFS teams prevented any destruction of blood products.
This incident occurred weeks after a series of cyberattacks on European supermarket refrigeration systems. Similar malfunctions had also been reported in U.S. military stores. The multiplication of these cases raises an industrial security question: how to prevent connected equipment from becoming an instrument of physical sabotage.
In the cold chambers of three French establishments, essential parameters for plasma preservation were altered remotely. Temperature instructions and defrost settings were pushed to abnormally high values. This remote manipulation could have had consequences far beyond a simple technical failure.
On 3 November 2026, the Établissement français du sang officially confirmed a cybersecurity incident affecting one of its specialized refrigeration equipment providers. The installations stored plasma bags intended for transfusions and the manufacture of blood-derived medicines. Preservation of these products depends on strict thermal conditions. Prolonged temperature elevation can compromise quality and lead to disposal.
This time, monitoring mechanisms worked. EFS alarm systems quickly detected the anomalies. Technical teams took necessary measures to secure equipment, neutralize affected installations, and proactively transfer certain products to other cold chambers. The establishment confirms that no blood products or samples were altered. No losses are reported and no health impact has been identified.
French Supermarkets to U.S. Military Installations
The case directly recalls events documented by ZATAZ in October 2026. On the night of 11-12 October, several French chains discovered that their refrigeration installations were no longer maintaining required temperatures. Stores including Intermarché, Netto, Leclerc and Super U were affected. Attackers diverted defrost functions on certain Danfoss regulation units, with setpoints reaching 99 °C. Consequences were immediate: thawed goods, products unfit for sale, and significant financial losses.
ZATAZ also recalled a U.S. precedent at the end of August 2026. Refrigeration installations in military stores experienced malfunctions, including abnormal defrost activations. These installations belonged to the U.S. military distribution environment linked to the Department of Defense, headquartered at the Pentagon. At the time, the possibility of malicious intervention circulated without official confirmation. The resemblance to the European events therefore merits attention without establishing common responsibility.
