Independent temperature monitoring helped France’s national blood service, the Établissement français du sang (EFS), preserve stored plasma after a cyberattack disrupted refrigeration equipment at three sites. The incident occurred on November 2, 2026. EFS deputy director Sophie Le Cam told RTL on November 4 that no blood products or samples had been lost.
The affected equipment came from a refrigeration supplier. EFS described an indirect impact on its facilities, where temperature and defrost thresholds were raised to unusually high settings. Its November 3 statement, detailed in BleepingComputer’s reporting, said monitoring and alarm systems detected the changes and staff secured the products. EFS reported no identified health impact.
A second view of the temperature
Le Cam explained that EFS had added temperature supervision independent of the supplier’s systems. That separate monitoring produced alerts quickly enough for staff to disconnect affected equipment. Plasma intended for transfusions and for manufacturing medicines was transferred or secured, and collection and distribution continued.
The operational lesson is specific: an alarm that depends entirely on the same controls being changed can leave an operator with a misleading picture. In this case, EFS’s separate supervision gave staff another way to recognize a developing problem and act. That is our assessment of the response described by Le Cam, rather than a technical finding about the attack’s entry point.
The supplier’s account leaves questions open
In a November 4 statement, Coolworld Rentals acknowledged an early-November cybersecurity incident involving remote monitoring software for refrigeration systems. It said a limited number of its units were affected and attributed the reported vulnerability to a third-party component. The company said it had taken measures and was supporting customers, while declining to discuss individual cases.
Coolworld’s statement does not name the component, a software version, a vulnerability identifier or an attacker. Those gaps matter when assessing whether other installations face the same exposure: similar equipment or similar symptoms alone do not identify an exploit.
DaySec previously covered refrigeration disruption at European retailers. The EFS incident extends the reported impact into medical storage, but the evidence reviewed does not establish a common operator or shared entry path. For EFS, the reported outcome remains that alarms and staff intervention protected the stored products.
