# Cyber Attack Alters French Blood Plasma Freezer Temperatures

*Published November 6, 2026*
*Source: [https://cybersecuritynews.com/french-blood-plasma-freezers-hacked/](https://cybersecuritynews.com/french-blood-plasma-freezers-hacked/)*

## Executive Summary

Hackers targeted the French Blood Establishment's cooling systems, altering freezer temperatures for stored plasma. Quick detection and response prevented operational impacts, but the incident highlights vulnerabilities in supplier equipment security.

*This is a Premium edition: its actionable insights are available to sec-news.ai Premium members —*
*[read the story](https://www.sec-news.ai/news/cyber-attack-alters-french-blood-plasma-freezer-temperatures) or [see plans](https://www.sec-news.ai/pricing).*

## Article

A cyber attack targeted the refrigeration systems of the French Blood Establishment, EFS, altering temperature settings from approximately -30°C to 110°C. This incident involved the systems of Coolworld, a provider of temperature-controlled equipment, and occurred overnight between November 1 and 2, 2026. Although the attack raised concerns about the safety of stored frozen plasma intended for patient transfusions, the French Health Ministry reported that staff detected the temperature anomalies in time, preventing any operational consequences.

The attack affected facilities in Bourgogne-Franche-Comté, with an on-call technician noticing the temperature rise and enabling a swift response. While initial reports focused on donor samples, EFS later confirmed that frozen plasma for transfusions was also implicated. However, there are no verified reports of plasma destruction, transfusion disruptions, or patient harm. The specific number of affected units and the actual temperatures reached remain undisclosed.

The 110°C figure represents a setpoint rather than the actual temperature inside the freezers, emphasizing the importance of distinguishing between requested control settings and real storage conditions. Fresh frozen plasma must be stored at -25°C or below, and deviations could compromise its suitability for transfusion if prolonged.

The attackers' identities and methods remain unclear, with no public technical findings revealing how they infiltrated Coolworld’s systems. Although CERT-FR issued a security alert concerning vulnerabilities in Danfoss and other systems, no direct link to the EFS incident has been confirmed. The alert advised against exposing management interfaces to the internet, recommending secure VPNs or protected networks for remote access.

This incident underscores the broader risks that supplier compromises pose to healthcare providers, affecting vital equipment and not just data. The prompt response by staff and independent temperature monitoring were crucial in averting a potential crisis, though the full technical details of the attack remain undisclosed.