Independent newsroom

Wednesday, November 4, 2026

The File

Every claim traces to a primary source. Uncertainty is labeled. Corrections are public.

Safety · Wednesday, November 4, 2026

Hackers set French blood-plasma cold rooms to heat up; alarms caught it in time

The File desk · Nov. 4, 2026, 7:39 a.m. ET

Partially confirmed3 primary sourcesAdded 7:39 a.m. ET, Nov. 4

Status

Partially confirmed. What happened at France's national blood service comes from its statement as quoted by franceinfo and from statements to BFMTV; the service's press site did not load for this desk. The temperature figures come from a newspaper report. The government cyber alert on hacked refrigeration controllers is Confirmed, from the CERT-FR page.
  • Partially confirmed
    Cold-room controls at three sites of the Etablissement français du sang were tampered with and set to very high temperatures; alarms caught it, and the service says no blood products were lost and no health impact was identified (EFS statement via franceinfo and BFMTV).
  • Confirmed
    France's CERT-FR knows of numerous compromises of internet-connected refrigeration controllers and warns attack campaigns against them are probably still under way (alert CERTFR-2026-ALE-012).
Hackers broke into the systems controlling cold rooms at three French blood-service sites this week and set the temperatures to very high levels, but alarms caught the tampering before any plasma was lost. The rooms held bags meant for transfusion and plasma to be processed into medicines. France's national blood service said its monitoring systems picked up the anomalies quickly, and it either brought the equipment back under control or shut it down and moved the products to other facilities.1
The blood service, Etablissement français du sang, was not itself the target. A company that supplies its refrigeration equipment was hit by a cybersecurity incident on Monday, and the attack reached the controllers at the three sites.1 According to one newspaper account, cold rooms kept at minus 30°C (minus 22°F) were set to heat up to 110°C (230°F).2 "No health impact has been identified and no loss of blood products is to be reported," the service said in a statement.1
France's government cyber-emergency team, CERT-FR, knows of numerous compromises of internet-connected remote controllers for refrigeration systems (Danfoss AK-SM and AK-SC series, and Copeland and Dixell xweb) and warns that attack campaigns against these devices are probably still under way.3 It advises owners to take the controllers' management screens off the open internet, reach them only through a secure VPN or protected network, update firmware and change default passwords.3 Supermarkets have also had their fridges disrupted by cyberattacks.1
The blood service is working with France's national cybersecurity agency and the Health Ministry, and has stepped up temperature monitoring across all its equipment.1 The Health Ministry said remote access to the affected equipment has been cut off and that "the situation is under control and under reinforced monitoring."2
Why it matters (Estimate). Estimate. This time the alarms worked and no plasma was lost, but France's cyber agency says attacks on these fridge controllers are probably still going on, so other cold storage that relies on them, including medicines and blood, could be targeted. This is our reading.
Investigators still have to count how many devices may be affected before the cold rooms can safely go back into service.2
How we know

Notes

  1. 1.franceinfo, published 5:08 a.m. ET Wednesday, quoting a communiqué the Etablissement français du sang issued Tuesday. The service's press site did not load for this desk. Quotes are this desk's translations from French. Not an official page; Partially confirmed. Source 1.
  2. 2.BFMTV, published 3:55 a.m. ET Wednesday, with statements from the blood service and the Health Ministry and temperature figures first reported by Le Canard enchaîné. Not an official page; Partially confirmed. Source 2.
  3. 3.CERT-FR, part of ANSSI, France's national cybersecurity agency: alert CERTFR-2026-ALE-012, first issued Oct. 12 and last updated Oct. 16. Confirmed. Source 3.

What is still unknown or disputed

  • Who carried out the attack, and why.
  • How many devices were affected, and when the cold rooms will be back in service.
  • Whether other health facilities use the same contractor or controllers.

Primary sources

Every claim in this story is drawn from the documents below. If a fetch failed, that is recorded on the card.

  1. Source 1

    Une cyberattaque touche des chambres froides utilisées par l'Etablissement français du sang, "sans impact" sur les échantillons conservés

    franceinfo · November 4, 2026

    "Aucun impact sanitaire n'a été identifié et aucune perte de produits sanguins n'est à déclarer"

    https://www.franceinfo.fr/internet/securite-sur-internet/cyberattaques/une-cyberattaque-touche-des-installations-frigorifiques-utilisees-par-l-etablissement-francais-du-sang-sans-impact-sur-les-echantillons-conserves_8267426.html

  2. Source 2

    De -30°C à 110°C: les chambres froides de l'Établissement français du sang ont été victimes du piratage d'un prestataire, "aucun impact sanitaire n'a été identifié"

    BFMTV · November 4, 2026

    "La situation est à ce jour maîtrisée et fait l'objet d'une surveillance renforcée"

    https://www.bfmtv.com/tech/cybersecurite/de-30-c-a-110-c-les-chambres-froides-de-l-etablissement-francais-du-sang-ont-ete-victime-du-piratage-d-un-prestataire-aucun-impact-sanitaire-n-a-ete-identifie_AV-202611040376.html

  3. Source 3

    CERTFR-2026-ALE-012: Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération

    CERT-FR (ANSSI) · October 16, 2026

    Des campagnes d'attaques sont probablement toujours en cours visant ces équipements.

    https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/