Cyberattacks Hit French Blood Banks as Hackers Target Supermarkets Across Europe
Three regional blood banks in France were hit by a cyberattack on November 2, disrupting refrigeration monitoring and control systems, while hackers targeted supermarkets across eight European countries around the same time. Staff were able to prevent damage to supplies by moving blood stocks to unaffected refrigerators in time.
Reading
In a Nutshell
- Three regional facilities of the French Blood Establishment (EFS) were hit overnight between Sunday and Monday, affecting systems monitoring and controlling cold storage rooms.
- Staff received alerts and transferred blood stocks to refrigerators that were not connected to the compromised systems. No impact on blood supplies was reported.
- Around the same time, hackers tampered with supermarket refrigerators in eight European countries, forcing retailers to discard large quantities of food.
- France's health ministry said the situation was under control by Wednesday, after remote access to the affected refrigerators was disabled. Investigations are under way to establish how the attacks were carried out and when the systems can safely return to service.
Context
The attacks came three weeks after a similar incident in France, when hackers seized control of cooling units at hundreds of supermarkets, causing fires and food losses. The latest incidents extended the targeting of refrigeration infrastructure beyond retail stores to blood storage facilities, while attacks on supermarkets were reported across eight European countries, from Sweden to Belgium.
The incidents have drawn attention to vulnerabilities in connected infrastructure across the European Union, where security concerns have grown since Russia's invasion of Ukraine in 2022.
Why It Matters
Unlike supermarket food, compromised blood stocks carry direct risks for patients who depend on transfusions, including those undergoing surgery, receiving cancer treatment or being treated for severe injuries. If refrigeration temperatures rise beyond safe limits, blood can become unusable, leaving hospitals with fewer safe supplies for emergencies and routine treatment. An attack on blood storage systems therefore puts a critical link in healthcare delivery at risk, even if the hackers never gain access to patient records or hospital networks.
What We Think
Staff were able to protect the blood stocks this time, but the incident exposed how quickly a cyberattack on seemingly ordinary equipment can become a patient safety issue. Blood banks need safeguards that keep storage systems secure and ensure supplies remain protected even when monitoring and control systems are compromised.