🔍 Read the full analysis: When Hackers Changed A Blood Bank's Plasma Freezer Setting To 110 °C on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
France’s national blood service, the EFS, said a cybersecurity incident affecting a refrigeration contractor’s remote supervision systems altered settings at cold rooms at three sites during the night of Nov. 1–2, 2026. Plasma was moved as a precaution after alarms and an on-call technician detected a temperature rise; the EFS reports no health impact and no loss of blood products. A reported 110°C was a programmed target, not a measured temperature.
France’s national blood service said a cybersecurity incident involving a refrigeration contractor altered the supervision and control settings for cold rooms at three EFS sites overnight Nov. 1–2, 2026, where frozen plasma was stored. Alarms and an on-call technician detected a temperature rise, and the plasma was moved as a precaution; the EFS reports no health impact and no loss of blood products.
In a statement dated Nov. 3 and quoted by franceinfo and Next the following day, the Établissement français du sang (EFS) said the incident affected supervision and control installations for cold rooms at three of its sites. The service said temperature and defrost thresholds were raised to very high settings. It did not identify the refrigeration contractor or specify a temperature in its statement.
Le Canard enchaîné reported that the cold rooms were set to +110°C rather than their intended −30°C. That figure describes a controller setting, not a temperature recorded inside a room; the available accounts report no measured temperature of 110°C. The EFS said the rooms held plasma for transfusion and plasma for fractionation, a process used to make medicines. It said products were moved to other facilities as a precaution after its monitoring and alarm systems identified the abnormal settings.
The EFS said technical teams were working with France’s national cybersecurity agency, ANSSI, and the health ministry, and that temperature monitoring had been stepped up across its equipment. EFS president Frédéric Pacoud told BFMTV on Nov. 4 that products could have been lost if the incident had not been detected, while saying their safety was not affected. The health ministry described the event as having no operational consequence because it was spotted.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
How the Plasma Was Protected
The incident shows how a change to remote refrigeration controls can put temperature-sensitive medical supplies at risk even when there is no reported breach of patient data or direct interference with clinical care. Plasma must remain frozen to meet storage requirements; the relevant danger is warming beyond the permitted range, not a controller displaying an extreme target.
In this case, the EFS says its alarms and monitoring detected the anomaly, allowing staff to move the bags before any loss was reported. That response matters because blood products are used for transfusions and to make medicines, and replacing affected supplies could create practical pressure on hospitals and production. The service has not reported such consequences from this incident.
The event also focuses attention on access granted to outside maintenance providers. Remote access can support refrigeration systems across multiple sites, but a compromised contractor system may expose more than one customer. The source material does not establish how the attacker gained access or whether any other systems were affected. Independent alarms, checks by staff and a way to relocate stock are relevant safeguards, but the EFS has not described the full technical controls used in this case.
Products Worth Considering
LG UltraGear 27GX704A-B 27-inch QHD OLED Gaming Monitor
Samsung Odyssey G4 25-inch FHD Gaming Monitor
LG UltraGear 34GX90SA-W 34-inch WQHD Curved OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
The Reported 110°C Setting
The EFS is France’s national blood service, collecting donations and supplying hospitals. Its public statement confirmed an incident affecting a contractor’s installations at three sites but did not name the contractor. Le Canard enchaîné identified the contractor as Coolworld; that identification is attributed to the newspaper, and Coolworld had not publicly commented in the source material. The EFS said it was not directly targeted, according to the report.
The precise temperature figure comes from press reporting rather than the EFS statement. According to Le Canard enchaîné, the rooms’ intended setting was −30°C, while the controller was set to +110°C. No source cited here says a room actually reached that temperature. The relevant storage threshold in the supplied reporting is −25°C or colder for fresh frozen plasma, citing European guidance as summarized by the International Society of Blood Transfusion.
The incident took place the same night as a reported second wave of attacks on supermarket refrigeration systems in multiple European countries. The source material says no authority has linked those attacks to the EFS incident. Two groups describing themselves as pro-Russian claimed the supermarket attacks in a video, but the claim was unverified, the posts were later deleted, and no government attribution was reported. That separate claim does not establish who was responsible for the blood-service incident.
““The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.””
— Établissement français du sang, statement dated Nov. 3, as quoted by franceinfo and Next
What Investigators Have Not Disclosed
The EFS has not publicly named the contractor in its statement, explained how the remote supervision system was accessed, or disclosed the identities of two of the three affected sites. The identification of Coolworld and the reported 110°C setting come from Le Canard enchaîné, not the EFS statement. The contractor’s response was not available in the source material.
It is also unclear how far the settings changed the rooms’ actual temperatures, how long they were outside their intended range, and whether the incident affected any equipment beyond the reported cold rooms. The EFS says its alarms detected the anomalies and that there was no product loss or health impact; no independent technical account of the event or published investigation findings were included in the material.
No government has attributed the EFS incident to a particular person or group. Its timing alongside attacks on supermarket refrigeration does not establish a connection. Claims by groups about those separate attacks remain unverified and should not be treated as evidence about the blood-service incident.
EFS and ANSSI Continue Their Review
The EFS said its technical teams were working with ANSSI and the health ministry to address the incident. It also said temperature monitoring had been stepped up across all EFS equipment. The service has not announced a public deadline for the work or released technical findings about the access route.
Further information from the EFS, the contractor identified by Le Canard enchaîné, or French authorities could clarify how the system was compromised, whether the incident was contained to the three sites and what changes are being made to remote access and monitoring. Until those details are released, the confirmed account is that alarms detected a rise, plasma was moved, and the EFS reported no harm or product loss.
Key Questions
Did a blood-bank freezer actually reach 110°C?
No such measured temperature is reported. The 110°C figure comes from press reporting about the target entered into a controller; it was a setting, not a recorded room temperature.
Was any plasma lost or did anyone get hurt?
The EFS said no health impact had been identified and no blood products were lost. It said the plasma was moved to other facilities as a precaution.
How many EFS sites were affected?
The EFS confirmed that the incident affected cold-room control installations at three sites. The supplied reporting identifies Bourgogne-Franche-Comté as one region; the other two sites were not publicly identified in the material.
Who was responsible for the incident?
No person or group has been publicly identified as responsible for the EFS incident in the available source material. The EFS described it as a cybersecurity incident involving a refrigeration contractor, while the contractor’s identity was reported by Le Canard enchaîné.
Was the blood-bank incident connected to supermarket refrigeration attacks?
The incidents occurred during the same night, but no authority has linked them. Claims by groups about the supermarket attacks were unverified and do not establish who was behind the EFS incident.
Source: ThorstenMeyerAI.com
