Attackers who compromised a refrigeration equipment supplier pushed temperature and defrost settings to extreme levels at three plasma cold-storage sites run by France's national blood service, though no blood products were lost, the Associated Press reported Wednesday. The incident carries a Europe-wide wave of refrigeration sabotage from supermarket aisles into a health care supply chain.
What Happened
The Établissement français du sang (EFS) said in a statement released late Tuesday that the tampering took place Monday and hit a supplier of refrigeration equipment at the three sites. The service told The Register its own systems were not directly targeted. The equipment held plasma meant for transfusions and for making medicines, along with blood samples.
"Monitoring and alarm systems quickly detected the anomalies," EFS said, according to AP. Products were moved to other facilities or secured, and blood collection and deliveries to hospitals continue. The Register said reports put the changed setting at 110 C, up from minus 30 C, and noted that does not mean the freezers or their contents reached that heat.
EFS has not publicly named the supplier. ANSSI, France's national cybersecurity agency, and the Health Ministry are investigating, AP reported. No attacker has been identified, and The Register said it is unclear whether the intrusion used the same route as the supermarket attacks.
Context
The Primary Wire reported Tuesday, citing AFP, that supermarket refrigeration attacks had spread to 11 European countries. ANSSI told AP it knew of compromised remote controllers from Danfoss, Copeland and Dixell, and pointed to its alert first issued Oct. 12. Danfoss said most affected systems were older products that no longer get security updates, and Copeland said it found a flaw in discontinued controllers, AP reported in a story carried by PBS NewsHour.
In Britain, three members of the Association of Independent Meat Suppliers were hit through vulnerable Copeland controllers for which a fix had been available since August, The Record reported. Richard Horne, chief executive of the National Cyber Security Centre, called the freezer attacks "really just sort of the foothills" of the threat the agency is warning about, according to The Record.
Why It Matters
Blood, plasma, vaccines and many medicines depend on refrigeration that is often installed, monitored and serviced by outside firms over remote connections. That puts the supplier squarely in the path of attack, as EFS's account suggests. EFS's own alarms limited the damage, a reminder that independent temperature monitoring works as a safety control.
For U.S. hospitals, blood banks and drugmakers, the practical questions are which refrigeration controllers can be reached from the internet, how service vendors connect to them, and whether factory passwords have been changed. France's alert urges taking exposed units offline, restoring remote access only through a protected network, updating firmware and reviewing defrost schedules. The Primary Wire reported Oct. 30, citing Nextgov/FCW, that the Pentagon is investigating freezer failures at military commissaries as a suspected cyberattack. No U.S. health care victim has been reported.
What to Watch
The French investigation should show whether the blood-service intrusion shares the supermarket attacks' entry point and whether the supplier serves other health facilities. No group has claimed responsibility, and European officials have not attributed the campaign.
