# Cyberattack on a provider for the French Blood Establishment

> In the night of November 1 to 2, 2026, Coolworld, a provider for the Établissement français du sang (EFS), was the victim of a cyberattack. Cold rooms containing blood samples were reportedly warmed up by hackers. On November 10, 2026, the Paris prosecutor's office opened an investigation following this cyberattack. The investigations have been entrusted to the Anti-Cybercrime Office and the DGSI.

**In brief**: Ongoing story bringing together 2 events nationwide, followed from 4 November 2026 to 12 November 2026. 47 articles from 29 sources (cyber); last updated on 12 November 2026 at 19:27.

- Status: ongoing
- Category: Cyber
- Place: Nationwide
- First detected: 4 November 2026 at 06:17
- Updated: 12 November 2026 at 19:27
- Web page: https://acturadar.com/en/stories/540-cyberattack-on-a-provider-for-the-french-blood-establishment

## Coverage angles

The three sides cover the opening of the investigation and the factual events, but the left emphasizes the danger posed by the hackers and the context of other attacks, the center details the technical and institutional aspects (audits, hypotheses about the perpetrators), while the right highlights the involvement of the DGSI and the potential consequences for stocks.

**Common ground**

- A cyberattack targeted cold rooms of an EFS provider in the night of November 1 to 2, 2026.
- The Paris prosecutor's office opened an investigation on November 10, 2026, entrusted to the Anti-Cybercrime Office and the DGSI.
- No loss of blood products or health impact has been reported according to the EFS and authorities.
- The temperatures of the cold rooms were modified remotely, with a reprogramming to 110 °C mentioned.

**Differences**

- The left (Libération) publishes a critical opinion piece on the 'romanticization' of hackers, an angle absent in the center and right.
- The center mentions security audits conducted by Thales on vital importance operators and hypotheses about motivations (buzz, foreign power), elements absent on the left and right.
- The right (CNews) headlines 'a blood bank' and insists on the concern and consequences for stocks, an angle less present on the left.
- The left (Le Monde) explicitly mentions a possible link with the attacks on large-scale retail in October, while the center (TF1/LCI) states that the prosecutor's office is unable to confirm this link at this stage.

## Timeline (2 events)

### 4 November 2026 — [Cyberattack on a provider for the French Blood Establishment](https://acturadar.com/en/events/8876-cyberattack-on-a-provider-for-the-french-blood-establishment.md)

Coolworld, a provider for the EFS, was the victim of a cyberattack during the night of November 1 to 2. Cold rooms containing blood samples were reportedly warmed up by hackers.

27 sources, 39 articles · Nationwide

### 10 November 2026 — [Paris prosecutor opens investigation after cyberattack on the French Blood Establishment](https://acturadar.com/en/events/15934-paris-prosecutor-opens-investigation-after-cyberattack-on-the-french-blood.md)

The Paris prosecutor has opened an investigation following a cyberattack that affected cold storage rooms at the EFS. The investigation has been handed over to the Anti-Cybercrime Office and the DGSI.

7 sources, 8 articles · Nationwide

---

Cite as: Acturadar, “Cyberattack on a provider for the French Blood Establishment”, https://acturadar.com/en/stories/540-cyberattack-on-a-provider-for-the-french-blood-establishment
Methodology: https://acturadar.com/en/methodology