A Cyberattack on a refrigeration equipment provider affected cold-storage systems at three facilities operated by France’s national blood service, the French Blood Establishment (EFS). The incident occurred on November 2 and changed temperature and defrost settings, according to the organization.
EFS said it was not directly targeted. European refrigeration provider Coolworld Rentals confirmed that a cybersecurity incident involving remote monitoring software affected a limited number of its units. The company said attackers exploited a vulnerability in a third-party component and that it had taken measures in response.
At the affected EFS sites, temperature and defrost thresholds rose to extremely high levels. The cold-storage chambers hold blood products awaiting distribution to hospitals, as well as biological samples. EFS monitoring and alarm systems detected the changes, allowing staff to repair equipment or move products to other refrigerated facilities.
EFS reported no identified health impact and no loss of blood products. Plasma for transfusions and plasma used to manufacture medicines were either transferred or secured. Blood collection and distribution continued without interruption.
The blood service said its technical teams are working with France’s national cybersecurity agency, ANSSI, and the Ministry of Health. It has also increased monitoring of refrigeration equipment and temperatures.
Sources: BleepingComputer.