conv.

All stories
SecurityFading · day 5

Hackers raise French blood bank freezers to 110°C, no products lost

A cyberattack on EFS's refrigeration contractor Coolworld pushed blood and plasma storage temperatures toward 110°C, part of a wider wave hitting European supermarket fridges.

What to know

  • Hackers breached a refrigeration contractor (Coolworld) serving France's blood service and raised temperatures at three cold stores from roughly -30°C toward 110°C.
  • Alarm systems let technicians intervene before plasma and other blood products were damaged; EFS says it was not directly targeted and moved stock to other sites.
  • The intrusion follows a broader wave of cyberattacks on supermarket refrigeration across roughly a dozen European countries, causing millions of euros in spoiled food.
  • No group has claimed responsibility; EU officials and a Sophos analyst say possibilities range from state-linked sabotage to a lone hacker, while some reports point to the pro-Russian group NoName.

The dispute Whether the attacks represent confirmed Russian state-sponsored sabotage or remain an unattributed incident wrongly assumed to be Russian. · positions read across 48 posts and comments

most voices

Critical refrigeration and medical infrastructure should never be internet-connected; this is a basic, foreseeable security failure.

  • “Fridges shouldn't be on the internet, doubly so when it's one storing vital medical supplies.”

    RobotToaster · Hacker News ↗
some voices

This looks like Russian state-sponsored sabotage targeting food, money and now blood supplies across Europe.

  • “If Russia is trying to ensure that we have no food, no money and no blood to save lives, we can only presume they are preparing to attack us!”

    lifelearner47.eurosky.social · Bluesky ↗
some voices

Attribution to Russia or any specific actor is unconfirmed and premature.

  • “It's too early and I skimmed it, but did I miss where they confirmed it was Russia?”

    PapayaJuiceBox · Reddit ↗
some voices

Engineering fixes like data diodes, air-gapping, or read-only monitoring are cheap and should be mandatory for this kind of equipment.

  • “This is easily fixed with data diodes... making it physical impossible to send data to the equipment.”

    tedggh · Hacker News ↗

“state-based signalling and demonstration of capability”

Rafe Pilling, Senior director for threat intelligence, Sophos · The Guardian ↗ · Nov 3

Établissement Français du Sang (EFS) French national blood transfusion serviceCoolworld Refrigeration contractor for EFSThomas Regnier EU spokespersonRafe Pilling Senior director for threat intelligence, SophosNoName (pro-Russian hacker group) Suspected actorLe Canard Enchaîné French newspaper

Hackers raise French blood bank freezers to 110°C, no products lost
theguardian.com

How it unfolded 4 developments, newest first · click a bar or a number to jump articlespostscomments

Peak 55 pieces in two hours at Nov 4, 7 AM; 176 pieces over 5 days (94 articles · 57 posts · 25 comments) Nov 3, 3 PM — 1 piece · 1 post — X 1Nov 3, 5 PM — 3 pieces · 1 article · 2 posts — Hacker News 1, Newswires 1, X 1Nov 3, 7 PM — 2 pieces · 1 article · 1 post — Hacker News 1, Mastodon 1Nov 3, 9 PM — quietNov 3, 11 PM — 6 pieces · 5 articles · 1 post — Google News 4, Reddit 1, Newswires 1Nov 4, 1 AM — 4 pieces · 2 posts · 2 comments — Reddit 3, Mastodon 1Nov 4, 3 AM — 3 pieces · 3 posts — Bluesky 2, Mastodon 1Nov 4, 5 AM — 28 pieces · 11 articles · 7 posts · 10 comments — Reddit 8, Newswires 7, Mastodon 5, +3 moreNov 4, 7 AM — 55 pieces · 39 articles · 10 posts · 6 comments — Newswires 35, Mastodon 9, Hacker News 7, +3 moreNov 4, 9 AM — 13 pieces · 8 articles · 3 posts · 2 comments — Newswires 6, Google News 2, Mastodon 2, +2 moreNov 4, 11 AM — 19 pieces · 13 articles · 4 posts · 2 comments — Newswires 7, Google News 5, Mastodon 4, +2 moreNov 4, 1 PM — 2 pieces · 1 article · 1 post — Mastodon 1, Newswires 1Nov 4, 3 PM — 3 pieces · 1 article · 1 post · 1 comment — Hacker News 2, Newswires 1Nov 4, 5 PM — 6 pieces · 5 articles · 1 post — Google News 3, Newswires 2, Hacker News 1Nov 4, 7 PM — quietNov 4, 9 PM — quietNov 4, 11 PM — 1 piece · 1 post — Reddit 1Nov 5, 1 AM — 2 pieces · 2 posts — Bluesky 1, Reddit 1Nov 5, 3 AM — 5 pieces · 2 articles · 3 posts — Mastodon 2, Newswires 2, Reddit 1Nov 5, 5 AM — 1 piece · 1 article — Newswires 1Nov 5, 7 AM — 2 pieces · 1 article · 1 post — Newswires 1, Hacker News 1Nov 5, 9 AM — 2 pieces · 2 posts — Hacker News 2Nov 5, 11 AM — 1 piece · 1 post — Hacker News 1Nov 5, 1 PM — quietNov 5, 3 PM — quietNov 5, 5 PM — 3 pieces · 1 article · 1 post · 1 comment — Mastodon 1, Reddit 1, Newswires 1Nov 5, 7 PM — quietNov 5, 9 PM — quietNov 5, 11 PM — 1 piece · 1 post — Hacker News 1Nov 6, 1 AM — 1 piece · 1 post — Mastodon 1Nov 6, 3 AM — quietNov 6, 5 AM — quietNov 6, 7 AM — quietNov 6, 9 AM — 1 piece · 1 post — Mastodon 1Nov 6, 11 AM — quietNov 6, 1 PM — 6 pieces · 4 articles · 2 posts — Newswires 4, Bluesky 1, Mastodon 1Nov 6, 3 PM — 2 pieces · 2 posts — Mastodon 2Nov 6, 5 PM — quietNov 6, 7 PM — quietNov 6, 9 PM — 1 piece · 1 comment — Reddit 1Nov 6, 11 PM — quietYesterday, 1 AM — quietYesterday, 3 AM — 1 piece · 1 post — Mastodon 1Yesterday, 5 AM — quietYesterday, 7 AM — quietYesterday, 9 AM — 1 piece · 1 post — Mastodon 1Yesterday, 11 AM — quietYesterday, 1 PM — quietYesterday, 3 PM — quietYesterday, 5 PM — quietYesterday, 7 PM — quietYesterday, 9 PM — quietYesterday, 11 PM — quietToday, 1 AM — quietToday, 3 AM — quietToday, 5 AM — quietToday, 7 AM — quiet 1234
Nov 4Nov 5Nov 6yesterdaynow · 8:40 AM ET
  1. background

    Coverage frames attacks as pan-European cold-storage campaign — Roundup reporting grouped the blood bank intrusion with the earlier supermarket freezer attacks as a single pattern of cyberattacks on cold storage across Europe.

  2. 4

    AP and outlets confirm no blood products were compromised

    Follow-up reporting reiterated that France's cybersecurity agency (ANSSI) and health ministry were involved and that no biomaterial was lost, while noting a related cyberattack had also hit a regional Crédit Mutuel bank branch.

    1. first by Le Monde EN, 4d ago · also Newsweek, Euronews, Straits Times, SiliconANGLE, GB News, Security Affairs +16

      20 more headlines
    2. 9 outlets first by France 24 EN, 3d ago · also SecurityWeek, Orlando Sentinel, Baltimore Sun, Mercury News, AP News, Associated Press +2 · read ↗

    1 more claim →
    • LevZadov@kolektiva.social

      # hackers # hacking # cyberwar "French blood banks targeted by refrigerator cyberattack A cyberattack had attempted to destroy blood plasma by raising the temperatures in cold storage facilities past the boiling point. Blood banks in France were included among cyberattacks that hit refrigeration systems in several European countries on Sunday and…

      LevZadov@kolektiva.socialMastodon2d agoview on Mastodon ↗
    2 more of the top 3 · 6 posts in this stretch
    • I mean this is such a russian thing to do - try to kill children. Like they do every day in Ukraine.

      Newman_Helger/worldnews2d agoview on r/worldnews ↗
    • Hackers target French blood banks in latest freezer attack — as UK cybersecurity chief warns of 'sliding doors' moment for 'unprecedented' threat https://www. techradar.com/computing/cyberc rime/hackers-target-french-blood-banks-in-latest-freezer-attack-as-uk-cybersecurity-chief-warns-of-sliding-doors-moment-for-unprecedented-threat?utm_source=flip…

      thenewsdesk@flipboard.comMastodon3d agoview on Mastodon ↗
    all of them →
  3. 3

    Pro-Russian hacker group NoName floated as possible culprit

    A BBC report cited by social media pointed to the pro-Russian hacker group NoName, with links alleged to the Kremlin, as a possible actor behind the refrigeration attacks, though no official attribution has been confirmed.

    “latest reports talk about the pro-Russian hacker group Noname, which has links to the Kremlin. If Russia is trying to ensure that we have no food, no money and no blood to save lives, we can only presume they are preparing to attack us!”
    — lifelearner47.eurosky.social
    1. first by Australian Broadcasting Corporation, 3d ago · also ABC Australia, Semafor, The New Daily, China Daily Global Edition, ZeroHedge

      5 more headlines
    • lifelearner47.eurosky.social

      latest reports talk about the pro-Russian hacker group Noname, which has links to the Kremlin. If Russia is trying to ensure that we have no food, no money and no blood to save lives, we can only presume they are preparing to attack us!

      lifelearner47.eurosky.socialBluesky3d ago3▲view on Bluesky ↗
  4. 2

    EFS confirms attack, EU calls for collective cyber response

    EFS said thresholds were raised to 'very high levels' but alarms let technicians intervene before any products were compromised; affected stock was moved to other sites. EU spokesperson Thomas Regnier said agencies were holding urgent talks with national authorities, and Sophos analyst Rafe Pilling floated state signalling or a lone hacker as plausible explanations.

    “These are not isolated incidents and of course we have to be collectively resilient and prepared for such cyber incidents…”
    — Thomas Regnier, EU spokesperson
    1. first by PCMag, 3d ago · also Sky News, ITPro, TechRadar, Telegraph, HN Frontpage, Guardian +2

      6 more headlines
    • LukaszOlejnik@mastodon.social

      Cyberattack on France’s national blood service (EFS) via its refrigeration contractor Coolworld. Hackers reset freezers keeping blood donor samples at -30°C to a target of 110°C. The thing that stopped it from destructive impact was an on-call technician who noticed the temperatures going up. Frozen plasma intended for transfusion was stored there…

      LukaszOlejnik@mastodon.socialMastodon4d ago1.1k▲view on Mastodon ↗
    2 more of the top 3 · 39 posts in this stretch
    • mocchytry.bsky.social

      Tak už víme, proč se rozcvičovali na kuřatech v supermarketech. Schválně, co ještě se bude muset stát, než někdo přijde s tou brilantní myšlenkou, že by se mrazáky nemusely ovládat přes internet?

      mocchytry.bsky.socialBluesky4d ago36▲view on Bluesky ↗
    • I think this is probably something good to happen because what it is not normal, is that a company, any company, can sell you a half assed product, call it End Of Life with flagrant issues still happening, clean their hands, and leave you with the problem or having to buy another product, with the environmental cost of it plus the economical cost…

      erremerreHacker News3d agoview on Hacker News ↗
    all of them →
  5. 1

    Le Canard Enchaîné report breaks on social media

    Social accounts began circulating the French satirical paper's report that blood samples were heated to 110°C from a maintained -30°C, spreading the story widely before official confirmation.

    “JUST IN: 🇫🇷 French blood bank hit by cyber attack with blood samples being heated to 110 degrees Celsius from their maintained -30, per Le Canard Enchaîné.”
    — @Megatron_ron
    • JUST IN: 🇫🇷 French blood bank hit by cyber attack with blood samples being heated to 110 degrees Celsius from their maintained -30, per Le Canard Enchaîné.

      @Megatron_ronX4d ago2.8k▲view on X ↗
    2 posts in this stretch →
  6. background

    Hackers breach EFS contractor, push cold stores toward 110°C — Overnight, attackers accessed control systems at a refrigeration contractor (Coolworld) serving France's blood service, raising temperature and defrost thresholds at three cold stores holding blood and plasma from roughly -30°C toward 110°C.

  7. background

    European supermarket fridges and freezers hacked, food spoils — Retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands and Sweden reported refrigeration failures, followed a day later by Italy, Germany, Romania and the UK, with temperatures reaching 50°C and millions of euros of food damage.

  8. background

    Hackers seize cooling units at 700 French supermarkets — A prior wave of attacks in France compromised refrigeration controls at as many as 700 supermarkets, an earlier instance of the same tactic later used against blood banks.

Also covered reported alongside — the timeline has no entry for these yet

  1. first by NewsMax.com, 3d ago · also BBC

    2 more headlines
  2. first by Times of India, 4d ago · also The Record

    2 more headlines
  3. first by CNBC, 3d ago · also BleepingComputer

    1 more headline
  4. first by The Cyber Express, 3d ago · also Business Insider

    1 more headline
  5. first by Anadolu Ajansı, 4d ago · also Anadolu Agency

and 6 smaller pieces

What people are saying 17 voices from 5 sites · best of 48 · verbatim

Still unanswered
  • Who is actually responsible — a state actor, a criminal group, or a lone hacker?
  • Why were vital blood-bank refrigeration systems connected to the internet at all, given the earlier supermarket attacks?