Hackers targeted Coolworld, a company that maintains storage containers for France’s national blood service, the Établissement français du sang (EFS), on the night of 1 to 2 November, and cold rooms kept at -30°C were programmed to reach 110°C, Le Canard enchaîné reported on 3 November.
An on-call technician noticed temperatures rising in the cold rooms during the night, EFS told the paper. The cold rooms hold samples from donors, and EFS later acknowledged that frozen plasma intended for transfusion was also targeted, Le Canard enchaîné reports. The health ministry said there was no operational consequence.
Business Pill · Embedded Dependency
An evergreen Business Engineer explainer on depending on a supplier you cannot easily see or replace. It teaches the general idea only and does not discuss EFS.
The key insight: Cold rooms at France’s blood service, normally kept at -30°C, were programmed to reach 110°C through an attack on its contractor Coolworld, Le Canard enchaîné reported; by our count it is the third attack on refrigeration systems in Europe in 21 days, across eight countries.
EFS told Le Canard enchaîné: “Un technicien de permanence a constaté dans la nuit de dimanche à lundi une remontée en température dans les chambres froides”. In our translation: an on-call technician found a rise in temperature in the cold rooms during the night from Sunday to Monday.
The paper reports that EFS first said the samples were kept as part of a health-surveillance scheme for blood transfusion, before acknowledging that “du plasma congelé destiné à la transfusion” (frozen plasma intended for transfusion, our translation) was also targeted. The affected sites are notably in Bourgogne-Franche-Comté, according to the paper.
The health ministry told the paper “Il y a zéro conséquence opératoire, car la situation a été repérée”, which we translate as: there is zero operational consequence, because the situation was spotted. 20 Minutes reported on 4 November that the ministry said there was no consequence for the transfusion chain or for any patient.
20 Minutes reports that the attackers targeted the control systems of industrial equipment (OT/IoT) by exploiting a weakness at the outside subcontractor, Coolworld. The reports we read give no technical detail beyond that, and we give none.
EFS cold rooms normally kept at -30°C were programmed to reach 110°C on the night of 1 to 2 November, as reported by Le Canard enchaîné (3 November) and 20 Minutes (4 November). 110°C is the programmed target; the 140-degree swing is our arithmetic; bars are drawn from -40°C.
What Was Posted on X
Cyberattack on France’s national blood service (EFS) via its refrigeration contractor Coolworld. Hackers reset freezers keeping blood donor samples at -30°C to a target of 110°C. The thing that stopped it from destructive impact was an on-call technician who noticed the temperatures going up. Frozen plasma intended for transfusion was stored there too. Fortunately nothing was destroyed. This was a cyberattack on a sensitive layer of healthcare. From frozen peas to boiling plasma in three weeks…
Lukasz Olejnik, a security and privacy researcher and consultant, posted this at 07:08 UTC on 4 November 2026. He describes the EFS attack as reaching the blood service through its refrigeration contractor Coolworld, and links it to the supermarket attacks with the line “From frozen peas to boiling plasma in three weeks”, ending in a question mark. That link is his view; the reports we read say no connection has been formally established. His post is how this story reached us, and every fact in the piece comes from Le Canard enchaîné, 20 Minutes and the BBC.
Three Refrigeration Attacks in 21 Days
The EFS case is the third attack on refrigeration systems in Europe reported since October. Overnight into Monday 12 October, about 400 of roughly 15,000 French supermarkets were hit through software provided by Danfoss, the BBC reported on 12 October. On Monday 2 November, stores in seven countries were hit, the BBC reported, including about 40 Delhaize supermarkets in Belgium and Luxembourg.
By our count, that is three attacks in 21 days across eight countries: France, plus Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland. In each case the reports name an outside supplier of the equipment or its upkeep: Danfoss software in October, refrigerators made by Sabcobel on 2 November, and Coolworld at EFS.
The setting reported at EFS, from -30°C to a 110°C target, is a 140-degree swing, by our arithmetic. We treat 110°C as the programmed target, as Le Canard enchaîné’s article text and 20 Minutes describe it.
Refrigeration cyberattacks by date: French supermarkets (BBC, 12 October), EFS cold rooms via Coolworld (Le Canard enchaîné, 3 November; 20 Minutes, 4 November) and supermarkets in seven countries (BBC, 2 November). The three-attack, 21-day, eight-country count and the 80-store sum are our arithmetic. Chart: FourWeekMBA.
Is It the Same Campaign?
20 Minutes says that at this stage of the investigation no link has been formally established between the EFS attack and the supermarket attack in France in mid-October. Le Canard enchaîné frames it as cybercriminals turning from supermarket fridges to health-care fridges.
On the supermarket side, the BBC reports that the 2 November attack is believed to have used the same method as the October incident. The EFS attack and the seven-country supermarket attack fell on the same night and day, by the dates the reports give. No source we read says they are the same campaign, so we treat it as a separate, third attack, three weeks after the first.
As we read it, the three attacks share a route rather than a target: supermarkets in eight countries and a blood service were reached through equipment that an outside supplier manages or makes, according to the BBC, Le Canard enchaîné and 20 Minutes.
As we read it, the EFS case was stopped by a person, not a system: the reports credit an on-call technician who saw the temperature rise during the night.
As we read it, the cost in the supermarket attacks was spoiled stock; at EFS the material at risk was donor samples and frozen plasma for transfusion, which the ministry says suffered no operational consequence.
The health ministry, as quoted by Le Canard enchaîné
“Il y a zéro conséquence opératoire, car la situation a été repérée”
Three Implications
FOR HOSPITALS AND BLOOD SERVICES EFS’s cold rooms were reached through Coolworld, a company that maintains its storage containers, Le Canard enchaîné reports, and 20 Minutes says the attackers targeted the control systems of industrial equipment.
FOR REFRIGERATION CONTRACTORS Coolworld at EFS, Danfoss software in October and Sabcobel refrigerators on 2 November are the outside suppliers named across the three reports we read.
FOR RETAILERS AND REGULATORS 20 Minutes says no link has been formally established between the EFS attack and the October supermarket attack; the BBC reported in October that Paris prosecutors opened a cyber-crime investigation into that attack.
The framework puts it this way: “Enterprise vendors don’t sell software anymore—they sell irreversibility. The product is the interconnection.”
As we read it, the refrigeration attacks show the risk side of that interconnection: the remote link that lets a contractor maintain a cold room is also a path into it, so a blood service’s exposure includes its contractor’s security. The framework was published in December 2025 and is about enterprisesoftware vendors; it does not discuss refrigeration, EFS or Coolworld.
The reports we read do not say who is behind the attack or how many EFS sites were affected. We did not find a statement from Coolworld, and we did not read an EFS press release; EFS and ministry statements are as quoted by Le Canard enchaîné and 20 Minutes. Part of Le Canard enchaîné’s article is behind its paywall and we read the free portion. No source we read says artificial intelligence was used.
This Week In The AI Supercycle
Anthropic’s Reality Check, The Capital Squeeze, & The New World Order
This week’s issue: for two years the AI build-out was priced as a growthstory. This week it started being priced as a credit story.
Cold rooms holding donor samples and frozen plasma for France’s blood service were programmed to go from -30°C to 110°C in an attack through its contractor Coolworld on 1 to 2 November, Le Canard enchaîné reported. An on-call technician caught it, and the ministry says there was no operational consequence.
A note on sourcing. EFS and health ministry statements are as quoted by Le Canard enchaîné (3 November; we read the free portion of a paywalled article) and 20 Minutes (4 November); French quotations are given in the original with our translations. Supermarket figures are from the BBC’s 12 October and 2 November reports. The 21-day, eight-country count and the 140-degree swing are our arithmetic. We did not read statements from Coolworld or ANSSI.
Gennaro Cuofano is a CRO and tech executive who has worked in AI since late 2015, starting with bringing NLP, natural-language generation, voice and chatbot products to the marketing industry. His background is in law and finance: he holds a Master's degree in Law and an International MBA with an emphasis on corporate finance (LUISS Business School and the University of San Diego, 2012), and worked as a financial analyst at a real-estate investment firm in San Diego and as an assistant controller. His work focuses on business model strategy, business engineering and, more broadly, structural analysis: how companies make money, read from their own filings. He created FourWeekMBA and leads research there and at The Business Engineer, his newsletter on AI and business strategy, with over 95,000 subscribers and more than 1,000 published analyses. His writing has also appeared on Entrepreneur (for example, How to Digitize a Family Business in Europe) and HackerNoon. Find him on LinkedIn and Substack. See how we source.
