Sourced fact
The News
French authorities have announced that refrigerators used in medical facilities to store donated blood have been affected by recent cyberattacks carried out by unidentified hackers. The attack led to an attempt to raise temperatures in cold storage rooms. The French Blood Establishment (EFS) stated that intervention teams successfully intervened to protect blood supplies from spoilage despite the hacking attempts.
The institute confirmed that "no health impact has been identified and no loss of blood products is reported," meaning that human intervention succeeded in maintaining the safety of vital supplies. It should be noted that attacks targeting these fridges were directed exclusively at major retail stores so far before expanding their scope to include medical facilities.
While theories are circulating regarding the identity of the attackers, Russian activist groups have claimed they participated in breaching systems similar to those targeted in attacks on European supermarkets, although analysts have cast doubt on these claims. Theories range from involvement by Iranian or state actors to teenagers engaging in pranks, but experts believe that precise planning rules out random chaos.
Analysis & context
Analysis & Context
From an analytical perspective, technical evidence suggests the attacks were meticulously planned, targeting devices at specific times during the night to maximize damage, which requires a high level of coordination among attackers. Cybersecurity firms such as "Pividian" and "Luvovis" used digital decoy traps to study attacker methods without endangering real systems, discovering that electronic scans focused exclusively on Europe.
In the broader context, this type of attack is part of what is known as "hybrid warfare," where states or non-state groups use cyberattacks as a tool for political or economic pressure without engaging in direct military conflicts. Reports from the company "Squid" indicate that the nature of the attack aligns with activities by Russian activists or government entities, though they do not entirely exclude the possibility of Iranian involvement given their history of targeting industrial systems.
Here emerges the growing security challenge in critical infrastructure such as industrial cooling systems, where the refrigerators used were poorly protected and relied on public IP addresses easy to exploit. While some companies have ruled out Russian group involvement based on lack of conclusive technical evidence, ambiguity remains regarding the identity of the real actors behind these successive waves of attacks.
