Medtronic recalled 64,174 insulin pumps it could not patch against wireless hijacking

On June 27, 2019, Medtronic recalled its MiniMed 508 and Paradigm series insulin pumps after potential cybersecurity vulnerabilities were identified in the wireless RF communication they used. The FDA warned that an unauthorized person nearby could connect to a pump and change settings or control insulin delivery.

The FDA's recall database later classified the action as a Class 2 recall (Z-1581-2020) with 64,174 units in US commerce and determined the cause was device design. Health Canada said the vulnerabilities were first identified by external security researchers and confirmed by Medtronic testing; Medtronic advised that it could not update the pumps' software to fix the risk.

The danger was concrete: a changed setting could over-deliver insulin and cause hypoglycemia, or stop delivery and cause hyperglycemia and diabetic ketoacidosis. Both regulators stressed there were no known patient harms and considered the attack low-probability, but the fix was guidance — check software versions, take precautions — because no patch existed.

64,174 pumps in US commerce recalled (Class 2); FDA determined the cause was device design, and owners got guidance because firmware could not be updated.

Pumps talked over unencrypted radio, leaving settings open to nearby attackers

Older firmware had no update path, so the flaw could not be patched

Researchers found the issues years before the recall; Medtronic had no retrofit

FDA classified the cause as device design, not operator error

A connected medical device without an update path becomes unrecallable-by-patch: when researchers find flaws, the only remedy is warning or replacement — design updateability in from the start.

Medtronic issued an Urgent Field Safety Notification on June 27, 2019 and renotified customers on January 4, 2023. In 2021 Health Canada extended the concern to every MiniMed 508 and Paradigm pump distributed before 2015 — 2,620 units in Canada — and advised patients to consider newer models. The recall stayed open in FDA's database for years.