← Établissement français du sang (EFS)

2026 EFS — cyberattack on a refrigeration supplier raised cold-storage temperatures at three blood-service sites; no blood products lost

2026 Unknown records affected Share on X

Data compromised

No data theft has been reported. EFS says no health impact was identified and no blood products were lost; plasma was moved or secured after alarms caught the temperature change, and collection and distribution continued.

Technical writeup

EFS is working with ANSSI and the Ministry of Health and has stepped up monitoring of refrigeration equipment. A second wave in November hit more than 115 stores in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia.

Root cause

EFS says the attack on November 2, 2026 targeted its refrigeration equipment supplier, not EFS itself, and that temperature and defrost thresholds in cold-storage chambers at three facilities were raised to extreme levels. EFS has not named the supplier. Refrigeration rental firm Coolworld Rentals separately confirmed an incident involving remote-monitoring software on a limited number of its units, but it has not been confirmed as EFS's supplier. The attack follows the October wave against French supermarket refrigeration controllers.

References