What just happened? Refrigeration units operated by Établissement Français du Sang (EFS), France's national blood service, have been hit by a cyberattack. It is the latest in a series of intrusions targeting cold-storage controllers across Europe. No blood products or other biological materials were lost. The attack triggered EFS's alarm system, prompting staff to move the affected stock to functioning storage units before it could spoil.

The French Health Ministry said it is closely monitoring the situation and confirmed that no biological materials were lost. The intrusion appears to have targeted refrigeration equipment at three sites, reportedly including one in Burgundy-Franche-Comté.

The attackers did not breach EFS directly. The agency says the intrusion occurred at one of its service providers, which several outlets have identified as Coolworld, a refrigeration rental company. Coolworld has published a notice attributing the incident to "remote monitoring software" used in its systems. It traced the problem to "a component from a third-party supplier," but has released no further technical details.

Without those details, it is difficult to determine how the attackers gained access. In the earlier supermarket attacks, they targeted refrigeration equipment that was directly exposed to the internet. Coolworld may instead keep its controllers on a private network, which would have required the attackers to breach that network first. One detail stands out either way: EFS's monitoring and alarm system detected the breach, not the vendor's.

Coolworld has not disclosed which brand of controller it uses. The attacks so far appear to have targeted one manufacturer's equipment at a time.

Source link