The route into France’s blood service ran through a refrigeration contractor, not EFS itself. Intruders rewrote cold-room setpoints in spaces holding blood samples and plasma bound for transfusion, and the agency says monitoring caught it in time.
Safeguards caught the change, and no product was lost. EFS said its monitoring and alarm systems flagged the anomalies quickly, then either brought the affected units under control or shut them off. Stock was moved to other facilities as a precaution. The organisation notified ANSSI and the health ministry.
The settings were reportedly driven from -30C to 110C, though EFS stresses that rooms and contents need not have reached that figure. Panels that accept remote setpoint changes will happily record one.
The EFS case sits inside a widening campaign against European cold chain equipment. Retailers in Belgium, Ireland, Luxembourg, Sweden, Estonia, Finland, Germany, Portugal, Romania, and the Netherlands have reported defrost cycles triggered remotely. The European Commission convened its interinstitutional task force on Tuesday, and the UK’s NCSC says a small number of organisations there may be affected.
The defensive lesson is about third-party access. Facilities teams should ask who can push setpoints and from where, block vendor remote access to anything not on a maintenance window, and wire temperature alarms to respond rather than just record. A supplier’s support tunnel can reach a fridge without ever landing on a hospital’s own network.
