Skip to content
WIRED·

🧊Hackers Heat Up Blood Bank Fridges in France and US Bases

Your smart fridge could be the next attack vector

TL;DR

Attackers pushed cold rooms to dangerous temperatures at three French blood and plasma sites on November 2, after a wave hit supermarkets in 11 European countries. Samples survived thanks to fast alarms. The root cause is exposed, unpatched refrigeration controllers, and most of them are a firmware update away from safe.

Hackers pushed cold storage at three French blood and plasma sites to very high temperatures on November 2. The Établissement Français du Sang confirmed the blood samples survived, because alarms and staff caught the changes fast and triggered fail-safe measures. Nobody lost a bag. That's the lucky version. If you run anything on connected industrial or IoT hardware, this is your wake-up call. The attack pattern is the same one that hit supermarket chains in at least 11 European countries, and US military commissaries in August. The catch? Attackers got in through exposed controllers, not sophisticated zero-days. Authentication bypasses, arbitrary code injection, and weak configurations are all on the table, according to CISA. Your edge devices are probably less locked down than your web apps. The numbers are ugly. Hundreds of French stores threw away food in October. Roughly six US military grocery sites lost product in August. Many of these hacks trace back to temperature controllers from Danish firm Danfoss, which told customers that affected systems were running outdated firmware. Some attackers used passwords built from dates, which is embarrassing and very fixable. Who's behind it is still unclear. Russian hacktivists claimed credit without evidence, the Kremlin denied involvement, and researchers see possible Iran-linked actors. The Pentagon is working with French law enforcement. Expect attribution to take a while.

Hackers Heat Up Blood Bank Fridges in France and US Bases — WIRED

Key Points

1

Three French blood and plasma sites were affected, and the Établissement Français du Sang confirmed cold rooms were raised to very high temperatures on November 2.

Keep reading — it's free

Enter your email to keep reading — plus the best of AI & tech, daily. Free, forever.

Also get
or

Already a member? Sign in

iot-securitycritical-infrastructuredanfossfirmware-updatescisa

Comments

Subscribe to join the conversation...

Be the first to comment