French Blood Service hacked as refrigeration units are heated to 110 degrees

Hackers launched a cyberattack targeting the refrigeration equipment at three facilities of the French Blood Service (EFS), causing temperatures inside storage units to spike to 110 degrees Celsius. According to an EFS press release, the breach affected the monitoring and management systems of refrigeration units deployed across the sites.

• The cyberattack targeted refrigeration systems supplied by Coolworld across three French Blood Service facilities.
• Attackers remotely altered temperature and defrost thresholds to an extreme 110 C° instead of the standard -30 C°.
• The compromised storage units held vital blood products for medical facilities and biological samples for EFS biobanks.
• Rapid alerts and monitoring systems allowed staff to neutralize the anomaly, preventing any blood loss or patient health risks.

Attack Details and Coolworld Equipment

The targeted refrigeration units, supplied by Coolworld, are normally calibrated to maintain a stable temperature of -30 C° required for the safe preservation of blood, blood components, and sensitive biobank samples. However, unauthorized intrusion resulted in temperature thresholds and defrost settings being drastically altered to extremely high values that threatened the integrity of the medical supplies.

The French Blood Service assured the public that the situation remained under control. Monitoring and early warning systems successfully detected the anomalies, enabling staff to take immediate corrective measures and safeguard the blood samples. EFS confirmed that no loss of blood occurred and there were no negative consequences for patient health.

Connection to Previous European Supermarket Hacks

According to local newspaper Le Figaro, the attack closely mirrors a wave of breaches that hit French supermarkets in mid-October. During those incidents, hackers remotely raised the temperature of refrigeration units in hundreds of stores to 50 C°, spoiling vast amounts of food. Cybersecurity researchers later revealed that 85% of those devices operated on software containing known vulnerabilities.

By November, similar attacks had spread to supermarket refrigeration equipment across Belgium, the Netherlands, Estonia, Denmark, Luxembourg, and Ireland. The recent targeting of the French Blood Service indicates that malicious actors have expanded their campaigns from the retail sector to critical medical infrastructure.

Investigation and Cybersecurity Implications

The French National Cybersecurity Agency has joined the ongoing investigation into the incident. Authorities are working to determine how the attackers penetrated the remote management networks and are reviewing the security standards of third-party equipment vendors.

This security breach serves as a stark warning for healthcare and critical infrastructure providers regarding the vulnerabilities of industrial IoT and remote management systems. Protecting physical infrastructure from remote cyber threats requires rigorous network segregation, continuous monitoring, and prompt software patching.