Parker Waichman LLP

FDA Warns of Cybersecurity Threat with St. Jude Pacemakers, ICDs

St. Jude Medical ICDs with Merlin@home Transmitter Can be Hacked, FDA Warns The U.S. Food and Drug Administration (FDA) and the Department of Homeland Security (DHS) Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) are warning that St. Jude Medical heart devices using Merlin@home wireless transmitters are susceptible to cybersecurity threats. The FDA addressed the […]

St. Jude Medical ICDs with Merlin@home Transmitter Can be Hacked, FDA Warns

The U.S. Food and Drug Administration (FDA) and the Department of Homeland Security (DHS) Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) are warning that St. Jude Medical heart devices using Merlin@home wireless transmitters are susceptible to cybersecurity threats. The FDA addressed the issue in a Jan. 9, 2017 Safety Communication. The devices in question are implantable cardiac devices (ICDs), such as pacemakers, defibrillators and resynchronization devices.

Parker Waichman LLP is a national personal injury law firm with decades of experience representing clients in medical device litigation. The firm continues to offer free legal consultations to individuals with questions about filing a St. Jude Medical ICD lawsuit.

ICDs provide pacing for patients with a slow heart beat and send an electrical shock in patients with a dangerously fast heart rhythm. These devices, which are implanted under the skin in the upper chest, are attached to the heart through insulated wires, or leads.

The Merlin@home Transmitter connects to St. Jude ICDs to wirelessly transfer patient data to his or her physician. The system, which is placed inside the patient’s home, transmits and receives radio frequency (RF) signals. The transmitter sends data through a landline, cellular or wireless internet connection. The Merlin.net Patient Care Network allows doctors to monitor a patient’s ICD function.

The FDA warned that St. Jude ICDs connected to the Merlin@home Transmitter are vulnerable to hackers, who can potentially access the ICD through the transmitter. The cybersecurity threat means that someone could modify the device in ways that harm the patient, such as cause rapid batter depletion. The agency states that so far, no patients have been injured due to these cybersecurity issues.

“The FDA has reviewed information concerning potential cybersecurity vulnerabilities associated with St. Jude Medical’s Merlin@home Transmitter and has confirmed that these vulnerabilities, if exploited, could allow an unauthorized user, i.e., someone other than the patient’s physician, to remotely access a patient’s RF-enabled implanted cardiac device by altering the Merlin@home Transmitter.” FDA says in its Safety Communication. “The altered Merlin@home Transmitter could then be used to modify programming commands to the implanted device, which could result in rapid battery depletion and/or administration of inappropriate pacing or shocks.”

FDA says it will continue to review cybersecurity vulnerabilities in St. Jude ICDs with the Merlin@home Transmitter. The agency notes that medical devices are increasingly using wireless communications to transmit data easily and automatically. The FDA notes that “any medical device connected to a communications network (e.g. wi-fi, public or home Internet) may have cybersecurity vulnerabilities that could be exploited by unauthorized users. The increased use of wireless technology and software in medical devices, however, can also often offer safer, more efficient, convenient and timely health care delivery.”

Dept. of Homeland Security Issues Advisory for St. Jude ICDs

The ICS-CERT also released an advisory warning of cybersecurity threats with St. Jude ICDs and the Merlin@home Transmitter. In a notification dated Jan. 9, 2017 the agency said that the devices were susceptible to a “man-in-the-middle” cybersecurity attack. “An attacker with high skill would be able to exploit this vulnerability,” the agency said.

ICS-CERT conducted a review of the issue and scored the cybersecurity threat as an 8.9 out of 10 on the common vulnerability scoring system version 3.0. A “critical” vulnerability includes scores of 9.0 and higher.

The cybersecurity vulnerabilities were brought to light by Muddy Waters Research agency, who released a report on the issue in August 2016. The FDA has been collaborating with the ICS-CERT following the report. Both agencies acknowledge that the vulnerabilities pose a serious risk to patients if exploited. However, they also note that there have been no such cases so far.

Angela Stark, spokesperson for the FDA, said to Focus that “The agency’s investigation confirmed that St. Jude Medical’s Merlin@home Transmitter contains cybersecurity vulnerabilities. Certain vulnerabilities present greater risk of patient harm and the FDA’s actions to date have focused on addressing those risks first,”

According to the agencies, St. Jude has released a software update that reportedly addresses the cybersecurity vulnerabilities.

Legal Help for St. Jude Medical ICD Recipients

Parker Waichman has years of experience representing clients in numerous medical device injury lawsuits. If you or someone you know was implanted with a St. Jude Medical Implantable Cardiac Device with a Merlin@home Transmitter, you may have valuable legal rights. Our firm offers free, no-obligation case evaluations. For more information, fill out our online form or call 1-800-YOURLAWYER (1-800-968-7529).

What Our Clients Say About Us
We have worked with thousands of clients and we appreciate them and their positive reviews. Here are just a few recent client reviews...
5 Star Reviews 150
Positive: Professionalism , Quality , Responsiveness , Value Thankyou for all the hard work and time you put in for helping me with my case Christina "Tina" Morace I really appreciate all you have done MERRY CHRISTMAS & HAPPY NEW YEAR TO YOU & YOUR FAMILY stay safe
thomas smith
3 years ago
5 Star Reviews 150
I have been working with Tina for about a year and a half. She is a wonderful person and a true professional. I can't thank her enough.
Mike Antidormi
3 years ago
5 Star Reviews 150
Parker Waichman handled a slip and fall case for my husband - which was handled with the utmost professionalism. Speaking with the paralegal assigned to the case, Lynda Luckman, was an absolute pleasure. She was helpful from the inception of his case, up until receiving closing papers. She always knew exactly what the status of the case was and was always there to answer any and all questions we had. Her patience and kindness was exemplary. Brett Zekowski, the attorney on the case, was very attentive to our requests and delivered a result that we were very pleased with. We will certainly recommend Parker Waichman to anyone in need of legal assistance!
Audra Massimo
5 years ago

Why Choose Us to Help You?

We Take Care of Everything
Your situation is stressful enough: Let us take on the deadlines, paperwork, investigation, and litigation. We'll handle every detail so you don't have to worry.
No Recovery = No Legal Fees
We work on a contingency-fee basis, meaning that we only get paid from a portion of your settlement or jury award. If you don't get compensation, you owe us nothing.
Decades of Experience
Your situation is stressful enough: Let us take on the deadlines, paperwork, investigation, and litigation. We'll handle every detail so you don't have to worry.
Respected by Our Peers
Judges, insurance adjusters, and fellow attorneys all speak highly of our skills, and we've earned numerous accolades, including a flawless rating from AVVO.
We Have Many Locations To Serve You
We have the experience and the skilled litigators to win your case. Contact us and speak with a real attorney who can help you.
Long Island – Nassau
Parker Waichman LLP
6 Harbor Park Drive
Port Washington, NY 11050
Long Island – Suffolk
Parker Waichman LLP
201 Old Country Road – Suite 145
Melville, NY 11747
New York
Parker Waichman LLP
59 Maiden Lane, 6th Floor
New York, NY 10038
Queens
Parker Waichman LLP
118-35 Queens Boulevard, Suite 400
Forest Hills, NY 11375
Brooklyn
Parker Waichman LLP
300 Cadman Plaza West
One Pierrepont Plaza, 12th Floor
Brooklyn, NY 11201
New Jersey
Parker Waichman LLP
80 Main Street, Suite 265
West Orange, NJ 07052
Florida
Parker Waichman LLP
27299 Riverview Center Boulevard
Suite 108
Bonita Springs, FL 34134
Nationwide Service
Parker Waichman LLP
59 Maiden Lane, 6th Floor
New York, NY 10038