Staff at France's national blood agency narrowly averted a crisis after hackers manipulated the cooling controls of its storage facilities, pushing defrost cycles and temperature thresholds dangerously high. The French Blood Establishment discovered the tampering in time to rescue the stored blood samples, but the intrusion has alarmed health authorities worldwide.
The incident is part of an emerging wave of attacks aimed at operational technology—the specialized systems that regulate physical machinery such as refrigerators and pumps. While earlier attacks on grocery stores and food processors destroyed meat and caused fires, security officials warn that the stakes in healthcare are far higher. Health ISAC, a global health cybersecurity center, noted that tampering with cold-chain storage directly threatens the viability of donor blood, plasma, and critical therapies needed to save lives.
Investigators are still determining who carried out the intrusion. Two pro-Russian hacking groups claimed responsibility for disruptions across Europe and published purported credentials for commercial refrigeration equipment, but cybersecurity analysts urge caution, noting that such groups often exaggerate their involvement. Meanwhile, officials have also examined links to Iran, which was previously tied to an operational technology breach in Israel.
U.S. federal agencies, including the FBI and the Cybersecurity and Infrastructure Security Agency, have issued joint warnings about the vulnerability of cold-chain controllers across critical infrastructure. In France alone, thousands of refrigeration controllers were left directly exposed to the public internet without adequate protections, leaving essential medical supplies exposed to remote sabotage.