In this instance, the breach occurred via a supplier to the Établissement français du sang (EFS), the French public blood and plasma transfusion service.
According to press reports, the systems at three sites, normally set to minus 30 degrees, were reprogrammed to 110 degrees.
The target, according to the French press, was Coolworld, a supplier and maintenance provider for numerous storage facilities.
The authority called for public interfaces to be removed and for configurations, defrost cycles and alarms to be checked.
With the ability to change set-points, defrost cycles or alarms, the attacker carries out normal but unauthorised operations.