The French National Blood Service (EFS) has confirmed that its cold storage monitoring and control systems were indirectly targeted in a recent hacker attack. The incident, which occurred on November 2nd, affected three of the EFS’s facilities.
Indirect Target in Wider Cyber Campaign
In a statement released on November 3rd, the EFS revealed that the cyberattack, referred to as a “heater attack,” impacted their systems due to a third-party supplier. The affected cold storage units house vital biological samples for internal use and products designated for medical institutions.
Swift Response Prevents Damage
Fortunately, the EFS’s robust monitoring and alarm systems quickly detected the anomalies. Immediate action was taken to mitigate any potential risks, ensuring that no samples or blood products were compromised. The systems involved in the incident were promptly controlled or shut down, and the materials stored in the affected cold rooms have been successfully relocated to other EFS facilities.
Context: A Growing Threat
This incident involving the French Blood Center comes in the wake of similar cyberattacks targeting critical infrastructure in Europe. Earlier reports detailed how multiple supermarket chains across Europe suffered significant disruptions due to coordinated hacker attacks. In those instances, hackers manipulated freezer equipment, setting temperatures to a defrosting level of 50°C, leading to the spoilage of large quantities of food and considerable financial losses. The scale and sophistication of these attacks highlight a growing trend of targeting essential services and supply chains.
The “heater attack” refers to a type of cyber intrusion where malicious actors gain access to temperature control systems, such as those in refrigeration units, and artificially raise the temperature. This can lead to the spoilage of temperature-sensitive goods, including food and medical supplies, or damage to biological samples. The motive behind such attacks can vary, ranging from financial extortion to disruption of essential services.
The EFS’s rapid response is a testament to their preparedness and the effectiveness of their security protocols. While the direct impact on their operations was minimal, the incident serves as a stark reminder of the vulnerability of critical infrastructure to cyber threats. The reliance on external suppliers also presents a potential vector for attacks, underscoring the need for stringent security measures throughout the entire supply chain.
As the digital landscape continues to evolve, so do the methods employed by cybercriminals. Organizations worldwide, especially those managing sensitive data and essential resources, must remain vigilant and continuously invest in robust cybersecurity defenses to protect against such sophisticated threats.
