The key facts

  • The November 2 attack affected three EFS plasma storage facilities through a refrigeration equipment supplier
  • Temperature and defrost thresholds were attempted to be raised to extremely high values
  • No blood products were lost; blood collection and distribution were not interrupted

Attempt to overheat plasma storage facilities

On Tuesday evening, French authorities reported a cyberattack on several blood banks. According to the French Blood Establishment (EFS), on Monday, at three of its sites for cold plasma storage, 'the temperature and defrost thresholds were raised to extremely high levels.' The attack was carried out through a refrigeration equipment supplier, reports Euronews.

What was stored and why there was no damage

The warehouses held plasma bags intended for transfusions, as well as plasma for the production of medicines. The products were either relocated or their safety was ensured. 'No health consequences have been identified, and no blood products have been lost,' the EFS statement said. Monitoring and alarm systems quickly detected the anomalies, allowing staff to intervene before the preparations or samples were spoiled. According to the establishment, blood collection and distribution were not interrupted, and hospitals and other medical organizations continue to receive services.

Context and investigation

The incident occurred against the backdrop of reports this week that supermarkets in several European countries recorded warming of refrigerators and freezers after a remote hack — this led to the spoilage of tons of food worth millions of euros in total. The attack on EFS is being investigated by France's national cybersecurity agency and the Ministry of Health.