European Freezer Cyberattacks Reach French Blood Banks, Prompting US Security Warnings

The attacks first drew attention through spoiled supermarket food. Hundreds of stores were affected in October, according to The Atlantic, which described losses including frozen blueberries, waffles and ice cream.

The attackers targeted temperature controls. Forbes reported that anonymous hackers accessed those controllers and ruined millions of dollars worth of frozen goods. That made the consequences physical: compromised settings could leave stock too warm to keep.

By November 4, the disruption had extended beyond food retail. BleepingComputer reported that France's national blood service confirmed an attack on a refrigeration equipment provider, with temperature and defrost settings raised at three facilities.

The attempted changes threatened stored blood products, but the outcome was different from the supermarket losses. On November 5, France24 reported that French authorities said the attack had been thwarted before blood products or samples suffered damage.

Also on November 5, Euronews interviewed Kevin Curran, Professor of Cybersecurity at the University of Ulster, who described the supermarket attack as "not sophisticated" and said the vulnerabilities had long been known.

The response widened to the United States. On November 5, TechCrunch reported that a joint US government statement warned of an ongoing cyber threat affecting the food, transportation and healthcare industries.

On November 6, BleepingComputer reported that the FBI and CISA were warning of active attacks against industrial refrigeration and cold chain monitoring systems worldwide. The potential consequences included food spoilage, equipment damage and fire hazards.

By November 7, reporting was also examining the preparation behind the attacks. Euronews reported that hackers had probed Europe's refrigeration systems weeks beforehand, and that similar security weaknesses could expose hospital and data centre infrastructure.

The confirmed outcomes need to be kept separate: supermarkets lost food, while French authorities said the attack on blood storage caused no damage to blood products or samples. Forbes reported the retail losses; France24 reported the successful protection of the medical supplies.

The warnings now extend beyond European supermarkets. According to BleepingComputer, US agencies describe active targeting worldwide, not simply a hypothetical risk. A healthcare intelligence-sharing organization has also urged its members to lock down systems, NPR reported.

Responsibility remains unresolved in the supplied reporting. On November 5, RTBF reported that Kremlin spokesman Dmitri Peskov denied Russian state involvement. That denial does not establish who carried out the attacks.

The immediate test is whether operators close the access points identified in the warnings. The Register reported that US authorities urged owners to disconnect industrial smart freezers from the internet, apply patches and change default passwords.

Investigators still need to establish responsibility and the relationship between the incidents. Another open question is whether the same weaknesses will be exploited beyond refrigeration: experts cited by Euronews warned of potential exposure in hospital and data centre infrastructure.