Insulin Pump Wireless Recall Register

PROBLEM: On June 27, 2019, Medtronic recalled its MiniMed 508 and MiniMed Paradigm series insulin pumps — about 4,000 patients in the US — because of CVE-2019-10964 (CVSS 7.1): the wireless radio-frequency protocol did not properly implement authentication or authorization, so an attacker with adjacent access could intercept or modify communications, change pump settings, and control insulin delivery. Unlike the pacemaker case, no patch was possible: Medtronic could not develop a software update, so affected pumps had to be replaced with newer models. The FDA said "the risk of patient harm if such a vulnerability were left unaddressed is significant," and again no confirmed patient harm was reported. A device that cannot be patched and must be replaced is a different kind of recall — and no single register distinguishes patchable recalls from replace-only recalls.

SOLUTION: An insulin-pump wireless recall register: every wireless insulin pump recall logged with the vulnerability, the affected population, whether a patch exists or replacement is required, and the replacement completion rate — so a replace-only recall is tracked to completion, not closed at the announcement.

EVIDENCE BASIS: DOCUMENTED — Medtronic recall Jun 27, 2019 (MiniMed 508 and Paradigm series); CVE-2019-10964, CVSS 7.1, improper authentication/authorization; ~4,000 US patients; no patch possible, replacement required; FDA: risk of patient harm "significant"; no confirmed patient harm. Discovery built on work by Nathanael Paul, Jay Radcliffe, Barnaby Jack, Billy Rios, Jonathan Butts, and Jesse Young. Sources: FDA Class 2 Recall Z-1581-2020; CISA ICSMA-19-178-01; HIPAA Journal, Jun 28, 2019.