The attack that has been driving supermarket refrigeration up in temperature across Europe did not confine itself to food. Cold storage used by France’s national blood service, the Établissement français du sang (EFS), was among the equipment reached — and the control units were pushed from a holding temperature of -30C towards 110C.
It was caught. France’s health ministry said the episode had no operational consequences for blood transfusion supplies, because the temperature change was noticed before it could do its work.
Which company, and what it was holding
The French weekly Le Canard named Coolworld, a firm that stores containers for the EFS as part of a blood-transfusion health monitoring system, among those affected. The storage in question holds samples kept for monitoring rather than the stock a hospital reaches for in an emergency — a distinction worth keeping, because it is part of why the consequences stopped where they did.
-30C is not a number somebody picked
A blood service is not one cold room at one setting. Different products sit at different temperatures, and the windows are narrow. Plasma is held frozen, well below zero, and keeps for months that way. Red cells are chilled but never frozen, within a band only a few degrees wide. Platelets are the awkward ones: they are kept near room temperature, gently agitated, and they expire in days.
Every one of those is a rule with a reason behind it, and every one of them is enforced by a machine that has been told what temperature to hold. Change the instruction and the product is compromised long before anybody opens a door.
Why a controller is such an efficient target
An attacker going after refrigeration control does not have to enter a building, defeat a lock, or know what is inside the cabinet. The equipment does the damage itself, quietly, overnight. Worse, it reports that it is working normally, because by its own understanding it is — it was asked to hold a temperature, and it is holding it.
What stopped it in the French case was not a security product. Somebody looked, saw a number that could not be right, and acted on it.
A near miss is still a finding
Nothing was lost, and that should be said plainly before anything else is built on top of it. An averted incident is not a disaster, and it should not be written up as one.
But the useful part of a near miss is the distance it shows between the attack and the harm. Here that distance was a single observation. Not a backup system, not an isolated network, not an air gap — one impossible reading, noticed in time. That is a thin margin for a national blood service, and it is thinner still anywhere nobody is watching a dashboard at three in the morning.
Beyond France
Medical cold chains are not a French peculiarity. Vaccines, reagents, plasma, tissue and samples sit in temperature-controlled storage in every health system, and the monitoring that keeps them honest is increasingly remote — which is to say, increasingly reachable. The equipment involved in the European supermarket attacks was ordinary commercial refrigeration control, sold and installed by the thousand, and the same category of product keeps laboratory and hospital storage cold.
The supermarkets lost food. The blood service lost nothing at all. Both outcomes came out of the same weakness, and only one of them was decided by the attacker.
