The French Blood Establishment says external providers' blood cold storage units were hacked to raise temperatures, in a wave of refrigeration cyberattacks

The cybersecurity of critical infrastructure like blood storage is now a direct threat, necessitating enhanced, automated monitoring and rapid response protocols.

The French Blood Establishment (EFS) confirmed that its blood products stored in external providers' cold units were affected by a recent wave of cyberattacks targeting refrigeration systems across Europe. Hackers remotely compromised these units, raising temperatures to excessively high levels by altering temperature and defrost thresholds. The affected units were used for storing blood products before delivery to healthcare facilities, as well as for biobank samples and frozen plasma. While hundreds of supermarkets in Europe have experienced spoilage from similar attacks, the EFS stated that its surveillance systems detected the anomalies quickly. As a result, no blood products or samples were lost, and samples were promptly transferred to other facilities. The EFS is now working with the French National Cybersecurity Agency and the Ministry of Health, increasing its equipment monitoring.

This incident highlights a growing trend of cyberattacks targeting not just data, but the physical infrastructure of essential services. The vulnerability of cold chain logistics, even for life-saving products, is now evident, suggesting that cybersecurity strategies must expand beyond IT systems to encompass operational technology (OT) and the physical environment.

The swift detection and mitigation by EFS, involving rapid sample transfer and collaboration with national cybersecurity agencies, showcases a potentially emergent best practice for handling such OT-focused threats. The incident will likely spur increased investment in integrated OT security solutions and robust incident response plans across the healthcare and food supply chain sectors.