French Blood Establishment

Summary

Hackers targeted refrigeration systems at three regional facilities of the French Blood Establishment, compromising cold storage monitoring and control systems. Staff responded to alerts by moving blood products to unaffected refrigerators, leaving supplies intact while officials disabled remote access to the affected equipment and began investigating the intrusion. The incident coincided with separate attacks on supermarket refrigeration across eight European countries, causing some units to enter defrost mode and spoil food, and followed a prior disruption at hundreds of French grocery stores where temperatures reached dangerous levels.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Overnight between Sunday and Monday, hackers targeted refrigeration systems at three regional blood banks in France operated by the French Blood Establishment. The cybersecurity incident impacted certain cold storage room monitoring and control systems at several regional facilities of the national blood service. Officials from the French Health Ministry disclosed the attack on Wednesday in a public statement. Despite the compromise, blood supplies remained unaffected because employees received alerts and quickly moved the products to refrigerators that were not connected to the compromised systems. EFS spokesperson Charley Dubois told Reuters that staff work round the clock because blood can be needed at any time. Dubois said employees were warned about the problems by alerts and moved the blood to other refrigerators that were not connected. The Health Ministry stated the situation was under control by Wednesday. Remote access to the affected refrigeration systems had been disabled. Officials were investigating how the attack was carried out, which equipment may have been affected, and when the systems could safely return to service.

The blood bank incident coincided with cyberattacks targeting supermarket refrigeration systems in eight European countries, forcing retailers to discard large quantities of food. In Belgium and Luxembourg, approximately 40 Delhaize supermarkets were affected. Additional incidents were reported in Sweden, Ireland, the Netherlands, Estonia, and Finland according to the BBC. The attacks reportedly caused some refrigeration systems to enter defrost mode, raising temperatures and spoiling refrigerated products. The incidents followed a major cyberattack on French supermarkets the previous month, when hackers manipulated refrigeration systems at hundreds of stores. Major chains including Carrefour, Monoprix, Les Mousquetaires, E. Leclerc, and Coopérative U were affected by that earlier incident. Some stores reported refrigerator temperatures reaching 122 degrees Fahrenheit, resulting in significant food losses. Retailers were forced to discard large amounts of perishable food during the supermarket attacks.

Sources

Sources available to members: 5 sources.