- Supplier equipment
Connected refrigeration served three French blood-service sites.
- Controls changed
Temperature and defrost thresholds were raised.
- Monitoring alerted staff
Alarms identified the anomalies.
- Staff intervened
Teams secured or transferred plasma.
- Products protected
EFS reported zero blood-product losses.
EFS said collection and distribution continued. Sequence based on its public account.
On 2 November 2026, France’s blood service, Établissement français du sang, faced interference with refrigeration controls used for plasma storage. The incident reached equipment at three sites through a supplier-related exposure. EFS said monitoring and alarms detected the changes, allowing staff to secure or transfer the plasma. It reported no loss of blood products and continued collection and distribution. Associated Press · EFS statement, 4 November 2026
The setting, the alarm and the physical outcome
The public account concerns altered temperature and defrost thresholds. A changed setting describes a command or configuration. The condition of the plasma is a different observation. Published reporting gives no reliable sequence of product temperature readings or precise minute-by-minute response times. It also does not establish compromise of the EFS core network. Those boundaries matter when deciding what lessons can travel beyond the case. Associated Press · EFS statement, 4 November 2026
The most transferable point is the connection between an alarm and an action staff could take. Monitoring can flag an anomaly. Someone has to judge whether it needs local verification, whether stock can be moved safely and who is authorised to make that decision. EFS’s account tells us that detection and intervention occurred. It leaves the exact operating procedures and investigative details open.
Where the supplier boundary creates a decision
A supplier can manage equipment or provide remote support while the customer remains accountable for an operational outcome. The equipment could be a building system, a managed platform or another service with an external connection. Document what the supplier can access, who receives an alert and how the local team can confirm what is happening when the supplier is unreachable.
Consider an illustrative case at a busy service desk. A managed platform issues an alert that its records may be unreliable. A supervisor needs a verified route for urgent requests, an approved temporary log and a decision about which changes to pause. The supplier’s ability to diagnose the platform and the supervisor’s authority to protect the workflow are separate responsibilities.
From timely intervention to minimum viable operations
The NCSC uses minimum viable operations to describe the essential level at which an organisation can work safely and meet obligations while broader recovery continues. It is a useful lens for planning, separate from the documented EFS response. Define the smallest safe workflow, identify the information it depends on and agree what people are authorised to do. NCSC · Recovery and ongoing investigations
Temporary work also creates records. If a request is approved while the main system is down, restoring a backup can make that request look open again. A trusted reference, an owner and a reconciliation step help prevent duplicate work or missed commitments. Include that test when checking whether an important service is ready to reopen. NCSC · Preparing technical recovery capability
The operations research page shows the reported incident sequence and illustrates how a limited service can progress to full recovery.
