---
title: French blood service contractor hacked: cold rooms holding donor samples and transfusion plasma were reprogrammed to reach 110°C; an on-call technician caught it | ctxsec
url: https://ctxsec.com/items/efs-contractor-coolworld-cold-rooms-reprogrammed-to-110c-blood-plasma
description: "Le Canard encha\u00een\u00e9 reports that Coolworld, which maintains cold-storage containers for France's blood service (EFS) including in Bourgogne-Franche-Comt\u00e9, was hacked overnight Nov 1-2 and cold rooms normally kept at -30\u00b0C were set to reach 110\u00b0C. The EFS told the paper an on-call technician noticed temperatures rising during the night, and first said the units held donor samples kept for transfusion safety monitoring before acknowledging frozen plasma for transfusion was also targeted. The Health Ministry says there were 'zero operational consequences' because it was spotted."
status: "press report (Le Canard enchaîné, Nov 3) quoting the EFS and France's Health Ministry. Method, attacker and how hot the products actually got are not public"
published: 2026-11-03
---

> Le Canard enchaîné reports that Coolworld, which maintains cold-storage containers for France's blood service (EFS) including in Bourgogne-Franche-Comté, was hacked overnight Nov 1-2 and cold rooms normally kept at -30°C were set to reach 110°C. The EFS told the paper an on-call technician noticed temperatures rising during the night, and first said the units held donor samples kept for transfusion safety monitoring before acknowledging frozen plasma for transfusion was also targeted. The Health Ministry says there were 'zero operational consequences' because it was spotted.

[← Cybersecurity News](/news) · [markdown](/items/efs-contractor-coolworld-cold-rooms-reprogrammed-to-110c-blood-plasma.md)

press report (Le Canard enchaîné, Nov 3) quoting the EFS and France's Health Ministry. Method, attacker and how hot the products actually got are not public

2026-11-03

### French blood service contractor hacked: cold rooms holding donor samples and transfusion plasma were reprogrammed to reach 110°C; an on-call technician caught it

The 110°C figure is the setpoint the equipment was given, not a measured product temperature; no source says how warm the rooms or plasma actually got, how many sites were involved, or how the attacker got in. Nobody has claimed it. It follows the supermarket refrigeration sabotage across Europe (see our [Nov 2 item](/items/europe-supermarket-fridge-cyberattack-belgium-sweden-nov-2)), but no source has tied the two to the same equipment or attacker.

**If you run temperature-controlled storage:** find out whether a maintenance contractor can change setpoints remotely, and through what (vendor cloud portal, VPN, remote-access tool). Require MFA on that path, alert on setpoint changes rather than only on temperature thresholds, and keep an independent, offline temperature alarm that a remote attacker can't reconfigure.

Sources: [Le Canard enchaîné: Les hackers ont du sang sur les mains (Nov 3)](https://www.lecanardenchaine.fr/police-justice/55332-les-hackers-ont-du-sang-sur-les-mains) · [Anadolu Agency: French blood storage facilities targeted in cyberattack](https://www.aa.com.tr/en/science-technology/french-blood-storage-facilities-targeted-in-cyberattack-report/4110658)