EXPLORINEER
en

VN — VnExpress

Hackers attack refrigeration systems at France's blood bank

Security2 min read

Hackers attacked the cooling systems at France's national blood service, raising storage temperatures from -30°C to 110°C. The attack hit equipment that stores blood plasma for patients. Staff caught the problem in time, so no samples were lost.

What happened

Hackers attacked a company that supplies cooling equipment. Its systems were used to keep products at the French blood service (EFS) cold. Temperatures rose from -30°C to 110°C. EFS said its fridge systems were hit by a cyberattack on November 2. The attack targeted three sites in the Bourgogne-Franche-Comté region. These sites store blood samples and plasma used for patient transfusions. A night-shift worker noticed the unusual heat, and the technical team fixed it before any samples were damaged.

Key facts

  • Storage temperature rose from -30°C to 110°C.
  • Fresh frozen plasma must be kept at -25°C or colder.
  • The attack hit three sites in the Bourgogne-Franche-Comté region.
  • Two days earlier, on November 1 and 2, hackers pushed supermarket fridges and freezers in several European countries up to 50°C.

Why cold storage matters

Blood plasma is the liquid part of blood. Doctors give it to patients who have heavy bleeding or have lost a lot of blood. Frozen plasma must stay very cold. If it gets too warm for too long, it may not be safe to use. Many cooling systems are connected to the internet so that engineers can check and repair them from far away. This makes them easier to attack.

Why it matters

This attack shows that medical supplies can be put at risk by hackers. It is part of a wave of attacks on internet-connected cooling systems. Earlier attacks hit supermarkets in Europe and many French grocery stores. Experts say that many of these systems run old software, which gives hackers an easy way in.

What to watch

  • Results of the investigation by French cybersecurity agencies and the Ministry of Health.
  • Whether any plasma from the affected sites has to be thrown away.
  • Whether the cooling supplier finds and fixes the weak point in third-party software.
  • Advice from experts that important services cut internet access to key systems.

Glossary

EFS
The French national blood service. It collects blood and sends it to hospitals.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

SecurityITmedia

Strengthening Cybersecurity at Medical Institutions: Long-Term Risks to Patient Care from Ransomware Attacks

Japan's Ministry of Health, Labour and Welfare plans to significantly strengthen cybersecurity at medical institutions next fiscal year, requesting 13.7 billion yen for the project in its FY2027 budget request, up from 100 million yen in the FY2026 initial budget. A ransomware attack can make electronic medical records unusable for long periods and disrupt patient care, and the ministry's survey found many hospitals have numerous external connection points that are hard to manage and lack cybersecurity specialists. The ministry will support consolidation of external connections, use of specialists listed by IPA, and initial response to incidents.

Securityheise online

Patch now! Attacks on Zyxel switches observed

Admins must install current security updates to stop ongoing attacks on Zyxel GS1900 switches, as attackers can otherwise access devices and copy credentials. The flaw (CVE-2026-107441, CVSS 8.8, rated "high") can be exploited without authentication from the local network via a crafted HTTP request, and patches are provided only for models still within their support period. Researchers at Binarly found that the exploit used against the earlier CVE-2026-7273 also worked on the firmware meant to fix it, and the Canadian Cyber Centre has also warned of exploitation.

SecurityITmedia

Mos Burger, Workman, IIJmio Among Firms Announcing Customer Data Leaks from Unauthorized Access to Ararа

Companies using mail delivery service provider Arara are announcing customer data leaks linked to unauthorized access to the service. Mos Food Services (Mos Burger), Workman, IIJ, and Sumitomo Fudosan were among those announcing on November 4, with Arara estimating up to about 380 contracted companies may be affected. Mos Food Services reported that 7,517,087 records of its member data, including email addresses, were leaked, without payment card information.

SecurityITmedia

Failure to Notice a Published Vulnerability Led to Leak of 396,920 People's Data; Recruiting Service ApplyNow Also Exposed Some My Numbers and Bank Account Information

ApplyNow, a Tokyo-based recruiting service provider, announced on November 4 that the personal information of 396,920 people was leaked through unauthorized access to its services first disclosed on September 9. Some records included My Number, basic pension numbers, and bank account details, while credit card information and identity document images were not affected. The company attributed the breach to failing to apply a vendor-published patch to an internal data analysis tool in time, and it has since applied the fix and restricted access to specific IP addresses.