French Blood Bank Impacted by Cyber-Attacks on Storage Freezers

Medical facilities in France experienced cyber-attacks targeting refrigerators utilized for storing blood donations, according to local authorities. The French Blood Establishment reported that cold rooms holding blood supplies were affected when temperatures began rising, though prompt staff intervention ensured no products were lost and patient health remained unaffected. Previously, such freezer hacks were only known to impact supermarkets across Europe.

Simultaneously, online rumors circulated regarding alleged involvement from Russian hacktivist collectives. Groups such as Noname057(16) and Z-Pentest Alliance shared messages on Telegram claiming responsibility for the coordinated disruptions. However, their channels were subsequently deleted, leading cybersecurity experts to view those claims with skepticism.

Investigations Into the French Blood Bank Cyber Attack

Security researchers are currently evaluating evidence gathered from digital decoys known as honeypots. Several cybersecurity companies have deployed these fake freezer software environments to monitor attacker behavior without endangering operational systems. Data captured prior to the second wave of incidents revealed targeted scanning activity localized exclusively within Europe, contrasting with zero activity detected across other continents.

Ryan Dewhurst from Previdian noted that the simultaneous disruption of multiple fridge freezers points toward careful planning and coordination. While the underlying software vulnerabilities were simple to exploit due to poor protection, perpetrators required sufficient time to gather public Internet Protocol addresses, build target lists, and schedule execution for periods aimed at maximizing damage.

Although Russian state actors or hacktivists remain plausible suspects in what European officials describe as hybrid warfare, alternative culprits are being investigated. Experts suggest Iranian regime hackers or independent pranksters, including teenagers, could also be responsible. Researchers from Sekoia highlighted that Iranian-aligned groups possess a documented history of targeting internet-exposed industrial control systems using identical equipment.

Why it matters

The recent disruption of medical cold rooms highlights the growing vulnerability of critical infrastructure to remote digital interference. While the intervention of facility staff successfully protected stored plasma and donations from destruction, the incident underscores the broader security risks facing vital healthcare logistics across the region.