French blood service says cyber incident at refrigeration provider affected three sites

France's blood service, the French Blood Establishment (EFS), said a "cybersecurity incident" targeting a refrigeration service provider on Monday affected monitoring and control systems at three sites.

EFS said there had been "no health impact". It also said that "no loss of blood products" had been reported.

Separately, the bank Credit Mutuel Arkea said on Wednesday that a cyberattack had resulted in "fraudulent transactions". France 24 quoted the bank as saying the attack "enabled fraudulent transactions to be carried out".

What is reported

The French magazine Le Canard Enchaine first reported the blood service incident. According to the magazine, the cold stores were programmed to reach 110C instead of -30C. They contained blood samples and bags of plasma intended for transfusions and the manufacture of medicines.

France 24 reported that the attack was unsuccessful because of the facilities' alarm systems.

According to France 24, the French health ministry said investigations had begun to establish how the incident happened. The ministry gave no indication of who might be behind it. France's national cybersecurity agency is also investigating, France 24 reported.

France 24 also reported that a series of suspected hacks targeting supermarket refrigeration systems caused widespread disruption in Europe in recent days. It wrote that Credit Mutuel Arkea said it had been hit by a "similar attack", without specifying what the attack was similar to.

Credit Mutuel Arkea said it was trying to recover funds stolen by the attackers, according to a Reuters summary.

What each side says

• EFS said blood collection and distribution remain uninterrupted, ensuring continued services for patients at hospitals and other healthcare facilities.
• The office of Health Minister Stephanie Rist said the facilities' monitoring and alarm systems ensured the safety of the blood supplies.
• Credit Mutuel Arkea said the incident has been contained, operations are resuming and client assets are not affected, in a statement that France 24 attributed to Reuters. Reuters reported that the bank told customers their money was safe.
• Ahold Delhaize says a cyberattack last month, which affected its stores in the Netherlands, Belgium and the United States, will reduce its fourth-quarter sales by up to 250 million euros ($281 million), according to an AFP report cited by France 24.

What remains unclear

The reports reviewed by Vocemundi do not identify who carried out the attacks on the cold stores or the bank. They do not establish that the incidents are connected.

The reports do not independently verify the 110C setting or the EFS statements on health impact and product losses. They do not say whether temperatures changed at the sites, and they do not name the provider or the three sites.

The reports do not say how much money was involved at Credit Mutuel Arkea, how much has been recovered or whose funds were taken. They do not describe how the attackers gained access.

The account of the cold-store incident rests on one France 24 report. Vocemundi reviewed only a summary of the Reuters item.

Analysis

The incident shows how a third-party supplier can become a point of exposure for essential services, though the reports do not explain how access was gained. If investigators confirm the reported temperature change, attention may turn to how refrigeration systems are monitored and secured. If they find no link between the French incidents and the wider suspected hacks, the cases may raise separate questions for each sector. At Credit Mutuel Arkea, the scale of any losses and recovery remains unknown. Findings from the investigations could change this picture, whichever explanation they support.

Produced by the Vocemundi newsroom with AI assistance.