In a recent cybersecurity incident, the French Blood Establishment (EFS) successfully averted a potential crisis as cyberattacks targeted their plasma storage facilities. The attempted breach aimed to dangerously elevate the temperatures of stored blood products, yet timely interventions ensured the safety of all samples.
Details of the Cyberattack
On Monday, unauthorized attempts were made to increase the temperature settings at three cold-storage sites operated by EFS. The attack intended to push temperatures from the usual minus 30 Celsius to hazardous levels as high as 110 C. Fortunately, monitoring mechanisms promptly detected the anomalies, enabling staff to respond effectively and prevent any harm to the stored plasma.
The plasma involved in the attack was earmarked for transfusions and pharmaceutical manufacturing. EFS confirmed that all products were either secured or relocated, with no health repercussions reported. Operations related to blood collection and distribution proceeded without interruption, maintaining essential services for healthcare facilities.
Supplier’s Response and Investigation
Coolworld, the supplier of the refrigeration equipment affected, acknowledged the cyberattack. The company clarified that the vulnerability was linked to a third-party component beyond its direct control. Measures are being taken to address the limited impact on their units.
In response to the incident, France’s national cybersecurity agency, in collaboration with the Health Ministry, has initiated an investigation to uncover the origins and prevent future occurrences. The attack is part of a broader pattern of recent cyber threats affecting refrigeration systems across Europe.
Broader Context of Cyber Threats
This incident mirrors a previous wave of cyberattacks in October, which targeted refrigeration units in supermarkets across France, Belgium, and the Netherlands. The Dutch supermarket chain Ahold Delhaize reported significant financial impacts from the earlier attack, with estimated losses in sales and operating income.
Franz Muller, CEO of Ahold Delhaize, highlighted the growing challenge posed by cyber threats to businesses worldwide. The company had taken proactive measures by temporarily shutting down some of its systems to contain the disruption.
As cyber threats continue to evolve, the need for robust cybersecurity measures becomes increasingly critical for organizations handling sensitive and essential services.
