What was reported
Hackers reportedly broke into control systems of cold-storage units used by the French blood service, Établissement français du sang (EFS), overnight from Sunday, 1 November, into Monday, 2 November 2026. The changes were reportedly made remotely. Le Canard enchaîné reported that the target was Coolworld, a firm that maintains the EFS cooling chambers, including units in the Bourgogne-Franche-Comté region. Those units are normally held at -30°C so that blood samples taken from donors stay preserved, and Coolworld also supplies controlled-temperature equipment used in medical facilities.
The attackers reportedly altered the settings so that the equipment was programmed to reach 110°C. Reporting also notes that the 110°C figure refers to the control-system setting, not necessarily the temperature the chambers or plasma bags actually reached. The number of affected units, the length of the disruption and the real temperatures inside the stored products have not been established.
Detection and the ministry's response
A technician on duty during the night noticed an unusual rise in temperature at the facilities. He alerted the competent authorities, which allowed the problem to be identified early. The French Ministry of Health said staff detected the abnormal temperatures in time, so the incident had no operational consequences for its services.
- Attack reportedly reprograms Coolworld-serviced units from about -30°C to 110°C
- On-duty technician notices unusual temperature rise and alerts authorities
- Ministry of Health says no operational impact because the rise was detected in time
Early reports suggested that the affected material was limited to samples, and the ministry's account rests on the fact that the rise was caught before any stored product was lost. The ministry's statement does not describe the scale of any damage, because none has been established in the available reporting.
What remains unclear
EFS first said the samples at the sites formed part of a health monitoring system linked to blood transfusions, and early reports said donor samples had been affected. EFS later told Le Canard enchaîné that frozen plasma intended for patient transfusions was also involved. So far, reports have not confirmed the destruction of plasma reserves, the cancellation or interruption of transfusions, or any harm to patients.
A wider wave of attacks
NewsIT framed the case as part of a run of cyberattacks across Europe over the 24 hours before its reporting on 4 November 2026. The outlet linked it to earlier attacks on supermarket refrigeration systems, to flights grounded after bomb threats, and to the evacuation of hundreds of schools for the same reason. NewsIT also noted that the blood kept at the sites is used for transfusions, which is why the French case drew attention.