Act today Critical Check your exposure
Cyber-attack on French blood service supplier overheats blood cold rooms
Infosecurity Magazinehealthcare, building automation
What happened. A supplier of the French National Blood Service was hit by a cyber-attack. Hackers turned cold rooms hosting blood samples up to 110°C (230°F).
Who is affected. A supplier of the French National Blood Service. The source does not say which other organisations are affected.
What to do. Review whether cold-room and building-control systems can be reached remotely, and brief your team on this case.
When to act. Act today: an attack on industrial operations: check for the same entry point
Editor's reading
Forasset ownerOT security leadleadership
- Purdue level
- L2
- L1
Why: Cold-room temperature control is a physical process run by controllers and supervisory systems, which sit at L1 and L2.
- Are you exposed?
Check whether refrigeration and building-management controllers are reachable from the internet or from supplier remote-access paths.
- If you cannot fix it yet
- Take cold-room and building-control systems off the internet and restrict remote access to known hosts.
- Set independent hardware temperature alarms and limits that software cannot override.
- Require multi-factor authentication on any remote path to refrigeration controls.
- Watch for
- Unexpected changes to temperature setpoints or alarm thresholds on refrigeration controllers.
- Remote logons to building or refrigeration control systems from unfamiliar addresses.
- ATT&CK for ICS
- T0831Manipulation of Control
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Infosecurity Magazine (opens infosecurity-magazine.com)
More on Healthcare Building automation