# Cyberattack against a service provider of the French Blood Establishment

> In the night of November 1 to 2, 2026, Coolworld, a service provider of the French Blood Establishment (EFS), was the victim of a cyberattack. Cold rooms containing blood samples are alleged to have been warmed by hackers. On November 10, 2026, the Paris prosecutor's office opened an investigation following this cyberattack. The investigations were entrusted to the Office for the Fight against Cybercrime and the DGSI.

**In brief**: Ongoing story bringing together 2 events nationwide, followed from 4 November 2026 to 11 November 2026. 44 articles from 28 sources (cyber); last updated on 11 November 2026 at 12:21.

- Status: ongoing
- Category: Cyber
- Place: Nationwide
- First detected: 4 November 2026 at 06:17
- Updated: 11 November 2026 at 12:21
- Web page: https://acturadar.com/en/stories/540-cyberattack-against-a-service-provider-of-the-french-blood-establishment

## Coverage angles

The three sides cover the same event (cyberattack against an EFS service provider, Paris prosecutor's investigation), but differ in angle: the left stresses the danger of cybercrime and the context of other attacks, the center details the investigation, audits and questions about the perpetrators, the right highlights the opening of the investigation and potential consequences for stocks.

**Common ground**

- The cyberattack targeted an EFS service provider in the night of November 1 to 2, 2026
- The Paris prosecutor's office opened an investigation, entrusted to the Office for the Fight against Cybercrime and the DGSI
- Cold room temperatures were modified remotely (up to 110 °C according to several media outlets)
- The EFS states there is no health impact and no loss of blood products

**Differences**

- The left stresses a warning against trivializing and "glamorizing" hackers, an angle absent from the center and right
- The center mentions security audits of vital importance operators conducted by Thales, including in hospitals, an element not taken up by left and right
- The center explicitly mentions the absence of a link with Iran at this stage, a detail absent from the provided left and right articles
- The right stresses concern about stocks and the number of affected sites, an angle less present on the left

## Timeline (2 events)

### 4 November 2026 — [Cyberattack on a provider for the French Blood Establishment](https://acturadar.com/en/events/8876-cyberattack-on-a-provider-for-the-french-blood-establishment.md)

Coolworld, a provider for the EFS, was the victim of a cyberattack during the night of November 1 to 2. Cold rooms containing blood samples were reportedly warmed up by hackers.

27 sources, 39 articles · Nationwide

### 10 November 2026 — [Paris prosecutor opens investigation after cyberattack on the French Blood Establishment](https://acturadar.com/en/events/15934-paris-prosecutor-opens-investigation-after-cyberattack-on-the-french-blood.md)

The Paris prosecutor has opened an investigation following a cyberattack that affected cold storage rooms at the EFS. The investigation has been handed over to the Anti-Cybercrime Office and the DGSI.

4 sources, 5 articles · Nationwide

---

Cite as: Acturadar, “Cyberattack against a service provider of the French Blood Establishment”, https://acturadar.com/en/stories/540-cyberattack-against-a-service-provider-of-the-french-blood-establishment
Methodology: https://acturadar.com/en/methodology
