OTTAWA, June 29, 2019 /CNW/ – Health Canada is advising patients and health care providers that certain older Medtronic MiniMed 508 and MiniMed Paradigm insulin pumps distributed between 2010 and 2015, may be vulnerable to cybersecurity risks. According to Medtronic, 2,620 of these insulin pumps have been sold in Canada.
The risk is not with the normal functioning of the device, but with the remote possibility of a cyberattack. Diabetic patients using an affected model are advised to identify if they have an affected device and to take the precautions listed below, and to talk to their health care provider at their next appointment about whether switching to a newer model with increased cybersecurity protection is the right option for them.
The potential cybersecurity vulnerability could result in changes to pump settings by an unauthorized person (someone other than a patient, patient caregiver, or health care provider). Changes to pump settings could result in either over-delivery of insulin to a patient, leading to low blood sugar (hypoglycemia), or stopping insulin delivery, leading to high blood sugar (hyperglycemia) and diabetic ketoacidosis. To date, Health Canada is not aware of any reports of patient harm related to this potential cybersecurity risk, and considers it to be low in probability and risk.
According to the company, the settings could only be altered by an unauthorized person if they know the serial number of the specific pump and can connect wirelessly nearby, and if they have the necessary technical skills, the correct radio frequency equipment, and the malicious intent to perform the hack.
Medtronic has indicated that the potential security vulnerabilities were first identified by external security researchers and confirmed by Medtronic testing. Medtronic has advised that it cannot update the software in the MiniMed 508 and Paradigm insulin pumps to address these potential cybersecurity risks. The company has issued a notification to Canadian customers and to health care professionals.
Who is affected
Diabetes patients who are using an affected Medtronic MiniMed 508 or MiniMed Paradigm insulin pump listed below.
Affected products
The following Medtronic MiniMed 508 or MiniMed Paradigm insulin pump are affected by this issue:
Pump Model |
Software Version |
MiniMed 508 |
All versions |
MiniMed Paradigm 511 |
All versions |
MiniMed Paradigm 512/712 |
All versions |
MiniMed Paradigm 515/715 |
All versions |
MiniMed Paradigm 522/722 |
All versions |
MiniMed Paradigm Veo 554/754 |
Version 2.6A or lower |
MiniMed Paradigm Veo 554CM/754CM |
Version 2.7A or lower |
What consumers should do
If you have an affected device, take the following precautions to protect yourself from cybersecurity risks:
Get medical help right away if you:
Report health or safety concerns
What Health Canada is doing
Health Canada continues to follow up with the company to make sure that the appropriate risk mitigation measures are taken. The Department will monitor the recall and update Canadians if significant new information becomes available.
The world of medical devices is constantly evolving and the Government of Canada is working to ensure that regulations and guidance keep pace. Health Canada has recently published guidance on Pre-market Requirements for Medical Device Cybersecurity to help protect patient safety. The new guidance describes how and when to implement strategies to reduce potential risks associated with medical devices that contain software and technology that enable communication with outside networks.
This guidance complements work underway as part of Health Canada’s Action Plan on Medical Devices. The Action Plan lays out a three-part strategy to further improve how medical devices get on the market, to strengthen monitoring and follow-up for devices already in use, and to provide Canadians with more information about the medical devices they rely on.
Related links:
Également disponible en français
SOURCE Health Canada
View original content: http://www.newswire.ca/en/releases/archive/June2019/29/c5028.html
PALO ALTO, Calif., Nov. 22, 2024 /PRNewswire/ -- Aulisa® Medical USA, Inc., a leader in…
NEW YORK, Nov. 22, 2024 /PRNewswire/ -- Report on how AI is redefining market landscape -…
Vancouver, British Columbia--(Newsfile Corp. - November 22, 2024) - DEFENCE THERAPEUTICS INC. (CSE: DTC) (OTCQB:…
3,250 InsuJet Starter Packs Being Delivered to Pharmacies Across CanadaToronto, Ontario--(Newsfile Corp. - November 22,…
The new app allows users to browse services, book IV therapy, manage appointments, purchase packages,…
PHILADELPHIA, Nov. 22, 2024 /PRNewswire/ -- Independence Blue Cross (IBX) is implementing the Epic Payer Platform…