European Freezer Cyberattacks Reach French Blood Stores as US Issues Warning

The attacks first affected supermarket refrigeration in France in mid-October, followed by incidents in numerous other European countries in early November, according to Le Monde. Hackers remotely took over fridges and freezers, causing them to warm up, Euronews reported.

The damage was physical, not just digital. CNN Brasil reported that temperatures in some supermarket and shop systems reached 50 degrees Celsius, causing food losses. Forbes described millions of dollars in ruined frozen goods.

On Monday, November 2, attackers changed temperature and defrost settings at three plasma cold-storage sites operated by the French Blood Establishment, or EFS. The organization said the thresholds were raised to extremely high levels, according to Technology.

By November 4, reporting had identified a supplier compromise as the route into those systems. The Register reported that attackers tampered with cold-storage settings after compromising a refrigeration supplier. Alarms caught the changes before plasma or samples were lost, according to The Next Web.

The same day, ARD Tagesschau reported additional refrigeration attacks in Germany and France, including one affecting a butcher's business in Bavaria. The incidents were no longer confined to supermarkets.

On November 5, Kevin Curran, Professor of Cybersecurity at the University of Ulster, told Euronews that the supermarket attack was not sophisticated and involved vulnerabilities known for a long time.

Also on November 5, US authorities issued a joint warning about an ongoing cyber threat affecting the food, transportation and healthcare industries, TechCrunch reported. Their advice included disconnecting industrial smart freezers from the internet, applying patches and changing default passwords, according to The Register.

The French blood storage attack caused no damage to blood products or samples, according to Euronews. That distinguishes it from the supermarket incidents, where food spoilage was reported.

A shared target does not yet establish a shared attacker. Le Monde reported that it remained unknown whether the EFS incident was linked to the earlier refrigeration attacks in France and elsewhere in Europe.

Russia denied involvement on November 5, RTBF reported, citing Kremlin spokesman Dmitri Peskov. That denial does not establish who carried out the attacks.

The immediate issue is whether operators secure exposed refrigeration controls. The US recommendations reported by The Register give concrete steps: remove internet access, patch systems and replace default passwords.

The central unanswered questions are who carried out the attacks and whether the supermarket and blood storage incidents are connected. The supplier compromise reported by BleepingComputer is a confirmed feature of the French blood service incident, not an established explanation for every attack.