Ethical Hacking News
A recent cyberattack on French plasma stores has exposed vulnerabilities in the food supply chain, highlighting the need for enhanced security measures to protect critical infrastructure. The incident, which occurred on Tuesday, involved attackers reportedly setting the temperature controls for cold storage rooms to 110°C, a temperature that can potentially cause significant damage to perishable goods. The French Blood Establishment's swift response and implementation of safeguards prevented any loss of blood products, demonstrating the effectiveness of the organization's security measures.
French plasma stores were targeted in a recent cyberattack, with attackers setting temperature controls to 110°C, potentially causing damage to perishable goods. The attack was reported to have compromised a refrigeration supplier, with the affected plasma store's systems not directly targeted. The incident highlights the need for enhanced security measures to protect critical infrastructure in the food supply chain. Similar attacks have occurred in other parts of Europe, including supermarkets and retailers in Belgium, Ireland, Luxembourg, and Sweden. The UK's National Cyber Security Centre has reported "a couple of impacts" in the UK's food supply chain, with affected businesses identifying Danfoss controllers as the source of the issue. The incident underscores the importance of incident response planning and robust security measures to prevent similar attacks. The attack on French plasma stores is a wake-up call for the food supply chain to prioritize cybersecurity and invest in robust measures.
A recent cyberattack on French plasma stores has sent shockwaves through the food supply chain, highlighting the need for enhanced security measures to protect critical infrastructure. The incident, which occurred on Tuesday, involved attackers reportedly setting the temperature controls for cold storage rooms to 110°C, a temperature that can potentially cause significant damage to perishable goods.
The French Blood Establishment (EFS), which stores blood samples and frozen plasma, confirmed that its systems were not directly targeted by the attackers. However, the organization's monitoring and alarm systems enabled the rapid identification of anomalies and the implementation of necessary measures to prevent any loss of blood products.
The attackers, who compromised a refrigeration supplier, had tampered with the cold-storage settings used by EFS. According to reports, the attackers changed the temperature settings from -30°C to 110°C, which would not have had the desired effect on the equipment or its contents.
Fortunately, the EFS's safeguards prevented any loss of blood products, and the affected equipment was either brought under control without impacting the products and samples or neutralized. The organization notified the country's cybersecurity agency, ANSSI, and the Ministry of Health.
This incident is not an isolated case, as similar attacks have occurred in other parts of Europe. Reports of supermarkets and retailers being affected by similar cyberattacks have emerged, with stores across Belgium, Ireland, Luxembourg, and Sweden being the first to report issues. Cases from Estonia, Finland, Germany, Portugal, Romania, and the Netherlands have since been confirmed.
Richard Horne, chief executive of the UK's National Cyber Security Centre (NCSC), has stated that he is aware of "a couple of impacts" in the UK's own food supply chain. Although no affected UK businesses have publicly identified themselves, the British Association of Independent Meat Suppliers (AIMS) has reported that some of its members have become "collateral" in the attacks, with two reporting that their fridges had begun defrosting.
The latest wave of cold-store attacks comes a month after the first incident, which affected French supermarket chains. Both incidents involved remote interference with refrigeration controls, causing stock losses. It remains unclear whether the attack on EFS used the same access route as the previous incident.
Some affected chains have identified Danfoss controllers in their systems, while others have reported that they did not use the company's equipment. CERT-FR published an advisory at the time of the attacks urging organizations to remediate vulnerabilities in Danfoss AK-SM and AK-SC controllers.
The attacks in France followed reports of compromises at US military commissaries, which also led to food wastage in August. The recent incidents highlight the need for organizations to prioritize cybersecurity and take proactive measures to prevent such attacks.
The incident also underscores the importance of incident response planning and the need for organizations to have robust security measures in place. The EFS's swift response and implementation of safeguards prevented any loss of blood products, demonstrating the effectiveness of the organization's security measures.
In conclusion, the cyberattack on French plasma stores is a wake-up call for the food supply chain to take cybersecurity seriously. The incident highlights the need for organizations to prioritize security, invest in robust measures, and have incident response plans in place to prevent similar attacks.
Related Information:
https://www.ethicalhackingnews.com/articles/Cyberattack-on-French-Plasma-Stores-A-Shocking-Incident-that-Exposes-Vulnerabilities-in-the-Food-Supply-Chain-ehn.shtml
https://www.theregister.com/security/2026/11/04/cyberattack-on-french-plasma-stores-is-enough-to-make-your-blood-boil/5307519
Published: Wed Nov 4 06:43:43 2026 by llama3.2 3B Q4_K_M
