Cyberattacks Target European Refrigeration Systems and French Blood Bank

A coordinated wave of cyberattacks targeting refrigeration operational technology has hit multiple European nations, nearly sabotaging the Etablissement français du sang (EFS). Between November 1 and 2, hackers breached the systems of Coolworld International B.V., a refrigeration maintenance contractor, to remotely reprogram temperature settings at three French cold-storage sites. The attackers raised temperatures for blood plasma and donor samples from -30°C to as high as 110°C, but on-duty technicians detected the spikes and secured the inventory before any products were lost.

This breach is part of a broader campaign targeting industrial cooling systems across Europe. Similar attacks in October and November hit supermarkets in France, Germany, Belgium, Sweden, Ireland, Luxembourg, Estonia, Finland, Romania, Italy, and the Netherlands. In France alone, approximately 700 supermarkets were targeted last month. The attacks caused millions of euros in food waste, with the Dutch chain Ahold Delhaize expecting a quarterly sales reduction of up to €250 million. In the United Kingdom, a London wholesaler avoided damage by disconnecting from the internet.

While no group has claimed responsibility, threat intelligence firms Lupovis and Sentinel Labs identified Russian-linked infrastructure as a credible hypothesis, and Western intelligence agencies have accused Moscow of conducting sabotage. Other experts suggest the campaign may be a demonstration of capability by a state actor or the work of a lone hacker. The European Commission and the UK National Cyber Security Centre are currently coordinating responses and monitoring vulnerabilities in remote controllers from suppliers such as Danfoss and Copeland.