DHS Warns of Heart Devices’ Cybersecurity Vulnerabilities
No deaths or injuries have been reported as a result of the problem.
The Department of Homeland Security announced on Tuesday that a manufacturer’s heart devices could be hacked remotely.
Manufacturer St. Jude Medical made a software repair to the devices, which include implantable defibrillators and pacemakers, that will be rolled out automatically over the next few months, according to CBS News.
The software update can be implemented if patients have a device transmitter at home that is plugged in and connected to the company’s network.
The cybersecurity vulnerability was discovered by MedSec Holdings researchers months ago, and a federal investigation began in August. Officials are not aware of any evidence to indicate any patients have been injured or killed due to the flaw, although the Food and Drug Administration’s investigation is ongoing.
“Your average patient isn’t going to be targeted by assassins,” Mathew Green, an assistant professor for computer science at Johns Hopkins University, says. “An attack on this level is low probability but very high impact.”
Although all of the device vulnerabilities have not been addressed, FDA spokeswoman Angela Stark says St. Jude is working to fix the problems quickly.
Campus Safety has previously reported on medical device vulnerabilities in products made by Hospira, which is now owned by Pfizer. The FDA later strongly encouraged healthcare facilities to stop using two intravenous pump systems as a result of those problems.
St. Jude’s devices detect dangerous pumping patterns in hearts to treat irregular heart rhythms that can cause cardiac failure or arrest.
Add Another Layer of Protection to your Campus
If you’re responsible for protecting a campus — whether at a hospital, K-12 school, college or university — then Campus Safety magazine is a must-read, and it’s free! As the only publication devoted to those public safety, security and emergency management personnel, issues cover all aspects of safety measures, including access control, video surveillance, mass notification, and security staff practices.
Take advantage of a free subscription to Campus Safety today, and add its practical insights, product updates and know-how to your toolkit. Subscribe today!
Campus Safety Heroes
Campus Safety honors those who keep their hospital, school or university campus safer.See our latest Heroes, nominees and content.
Recommended For You
Do you have a Threat Assessment Checklist? If not, you’ll want to download this FREE Active Shooter Checklist now!
Improving emergency preparedness on your campus is an evolving process involving both personnel and equipment. Learn from other school and college officials preparedness and who reveal what they look for in an emergency alert system.