Cyberattacks Target Medical Refrigeration Systems Across Europe

A series of dangerous cyberattacks has expanded from commercial supermarkets to critical medical infrastructure in France. The French Blood Establishment (EFS), which manages blood and plasma supplies for over 1,900 hospitals, reported that hackers recently gained access to the control systems of its refrigeration units. By changing the temperature settings, the attackers attempted to ruin vital medical products, but the attempt was stopped before any harm occurred.

According to the EFS, the attack occurred overnight on a Monday. Hackers managed to reach the control systems at three cold storage sites. Reports from the French newspaper Le Canard Enchaine suggested that the attackers tried to raise the temperatures to as high as 110 degrees Celsius. If successful, this would have destroyed the blood and plasma stored inside. However, the EFS confirmed that their monitoring and alarm systems detected the changes immediately. This allowed technicians to intervene, move the supplies to safe locations, and prevent any loss of life-saving products.

This incident is part of a much larger wave of cyberattacks that has hit Europe over the past few weeks. Before the attack on the blood banks, hackers targeted refrigeration systems in supermarkets across nearly a dozen countries, including Germany, Italy, the UK, and the Netherlands. These attacks have caused millions of euros in damage by spoiling large amounts of frozen food. In one notable case, the Dutch supermarket chain Ahold Delhaize estimated that a previous attack in October could reduce their sales by as much as 250 million euros.

Authorities are now working to understand how these systems were compromised. Coolworld, the company that provided the refrigeration equipment for the French blood banks, stated that the security weakness was linked to a component from a third-party supplier. This suggests that the hackers are exploiting vulnerabilities in the software that allows these machines to be controlled over the internet. As more devices become connected to the web, they become easier for hackers to reach if they are not properly protected with security updates.

European officials are treating these events with high priority. Following emergency talks in Italy, a spokesperson for the European Union, Thomas Regnier, stated that the bloc is holding urgent discussions with national authorities to create a collective response. While no group has claimed responsibility for the attacks, and the motive remains unclear, the scale of the incidents has raised significant concerns among security experts. Some officials worry that these actions could be a form of "hybrid attack"—a strategy that uses non-military methods like cyber-sabotage to cause chaos and weaken a country.

Rafe Pilling, a senior director at the cybersecurity firm Sophos, noted that these attacks might be a way for a state-based actor to demonstrate their power, or perhaps the work of a lone hacker. This theory aligns with warnings from Western intelligence officials who have suggested that there is an ongoing campaign of sabotage in Europe following the 2022 invasion of Ukraine. Similar mysterious malfunctions were also reported at military bases in the United States earlier this year, which the Pentagon is currently investigating.

For now, the French government has reinforced the monitoring of all medical refrigeration equipment. The Health Ministry confirmed that remote access to the affected units has been disabled to prevent further tampering. While the immediate danger to the blood supply has been managed, the incidents serve as a stark reminder of how vulnerable modern infrastructure is to digital threats. As the investigation continues, European nations are under pressure to improve their cybersecurity defenses to ensure that essential services, from food distribution to medical care, remain safe from future interference.