🔍 Read the full analysis: The 110 °C Setting That Exposed A Blood Bank's Cybersecurity Crisis on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
France’s national blood service, the EFS, said a cybersecurity incident affecting a refrigeration contractor’s systems led to altered cold-room settings at three sites overnight on Nov. 1–2. Alarms and an on-call technician detected the problem, and plasma was moved; EFS reports no health impact or product loss. The reported 110 °C figure was a programmed setting, not a measured room temperature.
France’s national blood service, the Établissement français du sang (EFS), said a cybersecurity incident involving a refrigeration contractor affected cold-room controls at three sites overnight from Nov. 1 to Nov. 2, prompting staff to move stored plasma as a precaution. The service said its alarms detected the altered settings, and it reported no health impact and no loss of blood products.
In a statement issued Nov. 3 and reported by franceinfo and Next, the EFS said a contractor’s refrigeration equipment had been affected by a cybersecurity incident. The affected systems involved the supervision and control of cold rooms. The EFS said temperature and defrost thresholds had been raised to very high levels but did not give a number in its statement.
Le Canard enchaîné reported that the cold rooms were set to +110 °C, despite being intended to operate at about −30 °C. That figure describes a controller’s target setting, not a temperature measured in the rooms. The EFS said its monitoring and alarm systems detected the anomalies quickly; an on-call technician also noticed temperatures beginning to rise during the night. The equipment was brought under control or switched off, and the contents were moved to other installations.
The rooms held frozen plasma for transfusions and plasma intended for fractionation, a process used to make medicines. The EFS said it was working with France’s national cybersecurity agency, ANSSI, and the health ministry. It also said temperature monitoring across its equipment had been stepped up. The service did not name the contractor in its statement.
Infographic 01 · 110 °C, explained
A setting, not a temperature
Someone raised the targets of plasma cold rooms at France’s blood service to +110 °C. The rooms never got there. What mattered was the alarm.
Frozen plasma has to stay at or below this line. The danger was thawing, not boiling. A few degrees too warm can already mean discarding bags.
- +110 °CThe programmed setpointTyped into the controller (Canard). Never reached, never measured.
- ~+50 °CHottest reported in the supermarket waveDefrost heaters forced on, same night (AFP, ZDFheute)
- −25 °CThe line that mattersFrozen plasma is stored at −25 °C or colder (EDQM guide via ISBT)
- −30 °CNormal operation of the EFS cold roomsAs reported by Le Canard enchaîné
Why the alarm won
- DetectionEFS monitoring and alarms flagged the anomaly quickly (EFS)
- A person on callAn on-call technician saw the temperature rise in the night (Canard)
- A plan BThe plasma was moved to other installations as a precaution (EFS)
Sources: EFS communiqué, 3 Nov 2026, via franceinfo · Le Canard enchaîné, as reported by Solutions Numériques · ISBT, citing the EDQM Guide · AFP via Al Jazeera, 4 Nov · ZDFheute, 3 Nov. The 110 °C and −30 °C figures come only from Le Canard enchaîné; the EFS gives no number.
Powered by Thorsten Meyer AI
Alarms Protected Plasma Stocks
The incident shows how a change to a remote control system can threaten temperature-sensitive medical supplies even when there is no reported damage to the products. Frozen plasma must be kept at very low temperatures; guidance cited by the International Society of Blood Transfusion, summarizing European EDQM standards, says fresh frozen plasma is stored at −25 °C or colder. A sustained rise beyond safe limits could put stock at risk, although the EFS says that did not happen here.
For patients and hospitals, the immediate reported outcome is reassuring: the EFS says there was no product loss or health impact. For operators of blood banks and other cold-storage facilities, the episode underscores the value of independent alarms, staff able to respond at night, manual checks and a plan for moving stock. Those safeguards helped limit the consequences in this case, according to the EFS account.
The incident also puts attention on third-party remote maintenance access. The available reporting identifies a contractor’s equipment as affected, but the EFS has not publicly named the contractor or explained how access was obtained. The facts released so far do not establish who was responsible or whether the incident was part of a broader campaign.
Products Worth Considering
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
Samsung 34-Inch Odyssey G5 Ultra-Wide Curved Gaming Monitor
LG UltraGear 34GX90SA-W 34-inch WQHD Curved OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
A Cold-Chain Incident on Nov. 2
The reported incident took place during the night of Nov. 1–2, 2026, the same night as a second wave of attacks affecting supermarket refrigeration systems in multiple European countries, according to the supplied reporting. No authority has linked the blood-service incident to those attacks. Similar timing alone does not establish a shared perpetrator or operation.
The EFS operates France’s national blood service, collecting donations and supplying hospitals. Its statement confirmed affected cold-room systems at three sites but did not identify their locations. Le Canard enchaîné named Coolworld as the contractor; that identification is attributed to the newspaper, and the EFS has not confirmed it publicly. The contractor had not commented publicly in the material available by Nov. 4.
Online accounts described the 110 °C setting as if blood products had reached that temperature. The source reporting says that is inaccurate: 110 °C was a programmed setpoint, and no source reported that the rooms actually reached it. The practical concern was the possibility of thawing if room temperatures rose too far, not evidence that the contents had boiled or reached the controller’s target.
“The EFS monitoring and alarm systems made it possible to identify these anomalies quickly.”
— Établissement français du sang, in its Nov. 3 statement
How the Remote Access Was Used
The EFS has not publicly identified the refrigeration contractor, and the contractor named by Le Canard enchaîné has not commented in the material available by Nov. 4. The service has not disclosed the three site locations or the specific route used to access the contractor’s supervision system. It is also not clear how long the settings were altered or how much the measured room temperatures rose before the alarms and technician response.
No government has attributed the incident to a particular person or group in the supplied reporting. Although the event occurred on the same night as attacks on supermarket refrigeration systems, no authority has linked the incidents. Claims by hacktivist groups about the supermarket attacks were described as unverified and do not establish responsibility for the EFS incident.
EFS and ANSSI Continue Review
The EFS said its technical teams were working with ANSSI and the health ministry, and that monitoring of temperatures across its equipment had been increased. The service has not announced a completion date for the investigation or detailed any further corrective steps.
Further information from the EFS, the contractor or French authorities could clarify how the remote system was accessed, whether other equipment was affected and what changes will be made to prevent a recurrence. For now, the confirmed public account is that alarms detected the anomalies, plasma was transferred, and the EFS reported no loss of products or health impact.
Key Questions
Did the plasma reach 110 °C?
No such measured temperature has been reported. The 110 °C figure was described by Le Canard enchaîné as a programmed controller setting, not the actual temperature of the cold rooms.
Were blood products lost or patients harmed?
The EFS said it had identified no health impact and no loss of blood products. The plasma was moved to other installations as a precaution.
Who was responsible for the incident?
Responsibility has not been established publicly. The EFS said a refrigeration contractor was affected but did not name it. Le Canard enchaîné identified Coolworld; that identification has not been confirmed in the EFS statement.
Was the blood-service incident linked to supermarket refrigeration attacks?
The incidents occurred on the same night, but no authority has linked them. Their timing does not establish that they had the same source.
What happens now?
The EFS said it is working with ANSSI and the health ministry and has increased temperature monitoring across its equipment. The investigation and any further security measures have not been detailed publicly.
Source: ThorstenMeyerAI.com
