Hackers Tried to Heat French Blood Storage Units to 110°C in a Chilling Cyberattack

A cyberattack targeting refrigeration equipment used by France's national blood service allegedly altered temperature settings to reach 110 degrees Celsius, according to a report published on 4 November 2026.

The incident involved equipment maintained by Coolworld for the French Blood Establishment (EFS), but authorities said the intrusion was detected before it caused operational disruption.

The attack occurred overnight from 1 to 2 November and was reported by French weekly Le Canard enchaîné.

The affected facilities included sites in Bourgogne-Franche-Comté, where cold storage units are normally maintained at minus 30 degrees Celsius to preserve blood samples and other materials used by the EFS.

French Blood Storage Cyberattack Raises Questions Over Plasma Safety

The incident initially appeared to concern donor samples retained for health monitoring linked to blood transfusions. Subsequent reporting said the EFS also clarified that frozen plasma intended for transfusion was among the products potentially affected, giving the incident a wider significance than the initial account suggested.

Plasma is a component of blood used in medical treatment, making appropriate storage conditions essential. However, the reported attack does not establish that the plasma was destroyed, became unusable or was administered to patients after its storage conditions were compromised.

The reported 110C figure refers to the alleged temperature setting, not a confirmed measurement of the units or stored products. The actual temperatures reached and duration of the incident remain unclear.

Coolworld, which maintains storage containers used by the EFS, was reportedly targeted, but the attack method remains unknown. There is also no confirmed evidence that the incident compromised the EFS's wider IT systems or resulted in data theft.

Nor have the perpetrators been identified in the reporting examined for this article. No verified information establishes who was responsible, what method was used to gain access or whether the attackers had a specific motive.

Technician Spots Temperature Rise Before Disruption

An on-call technician detected an abnormal rise in temperatures during the night, according to the EFS account cited by Anadolu Agency. France's Health Ministry said the incident caused no operational consequences because the problem was identified.

That statement offers reassurance about the immediate impact, but it should not be interpreted as a complete technical explanation of the attack.

The available reporting does not provide detailed temperature logs, identify the number of affected storage units or explain how investigators established the extent of the interference.

The EFS's clarification about frozen plasma also underlines why the distinction between an attempted temperature change and confirmed damage matters. The presence of transfusion material among the potentially affected products does not, by itself, demonstrate that any product was lost or that patient treatment was interrupted.

The incident also raises questions about the relationship between healthcare organisations and the outside companies that maintain their equipment.

A contractor may support systems that are essential to medical operations without being responsible for the healthcare service itself, making it important to establish exactly which equipment and networks were affected before drawing conclusions about the scale of a breach.

For now, the reported facts remain limited. The refrigeration equipment was allegedly programmed to reach an extreme temperature, a technician detected the rise and the Health Ministry said operations were not disrupted.

The available reporting does not establish the attack method, the identity of those responsible or the actual temperatures reached by the stored materials.