# FDA recalls Minimed 508 and Paradigm Pumps due to "cybersecurity concerns"

**URL:** https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788
**Category:** Pump
**Created:** [June 28, 2019, 5:50pm UTC](https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788 "2019-06-28T17:50:47Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![glitzabetes](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/glitzabetes/32/4287_2.png) [@glitzabetes](https://forum.fudiabetes.org/u/glitzabetes)
#### Post date: [June 28, 2019, 5:50pm UTC](https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788/1 "2019-06-28T17:50:47Z")

</div>

> **[FDA Recalls Some Medtronic Insulin Pumps Because of Cybersecurity](https://www.medscape.com/viewarticle/914994)**
>
> Patients using the recalled Medtronic's MiniMed 508 insulin pump and MiniMed Paradigm series insulin pumps are being advised use a different model.

Hello friends, I’ve been away for a bit! I saw this little piece of news and thought it may be of interest to some folks here.

Personally, I feel as though this move might be aimed at reducing the number of people using DIY closed-loop systems in addition to addressing the “cybersecurity risk”. The concern over someone having the ability to maliciously hack into an insulin pump is a valid one. Just seems a bit odd to me that they have likely known about this potential security flaw for several years now and they’ve suddenly decided to recall them

---

<div class="post-metadata">

### Author: ![MM2](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/mm2/32/3032_2.png) [@MM2](https://forum.fudiabetes.org/u/MM2)
#### Post date: [June 28, 2019, 6:15pm UTC](https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788/2 "2019-06-28T18:15:59Z")

</div>

Similar discussion here, with full list of models

> **[FDA warns of security risks in certain Medtronic insulin pumps](https://forum.tudiabetes.org/t/fda-warns-of-security-risks-in-certain-medtronic-insulin-pumps/78321/25)**
>
> This is clearly the one and only motive and reason behind the Med “urgent field safety notification”. The number of people using DIY systems has grown to the point when DIY systems can no longer be ignored by Med, FDA or other players. But, they do...

---

<div class="post-metadata">

### Author: ![glitzabetes](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/glitzabetes/32/4287_2.png) [@glitzabetes](https://forum.fudiabetes.org/u/glitzabetes)
#### Post date: [June 28, 2019, 6:24pm UTC](https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788/3 "2019-06-28T18:24:15Z")

</div>

Thank you! I was thinking it a bit odd that nobody here had posted about it yet but I guess maybe many people here are also active at TuD.

Here’s the Medtronic statement, someone shared there, with the model numbers:  
[https://www.medtronicdiabetes.com/customer-support/product-and-service-updates/notice11-letter](https://www.medtronicdiabetes.com/customer-support/product-and-service-updates/notice11-letter)

Interestingly my last Medtronic pump (the 530G) appears to be on neither the vulnerable list nor the not vulnerable list, although I’m quite aware that it cannot be used with Loop so I suspect it’s not vulnerable 😛

---

<div class="post-metadata">

### Author: ![bkh](https://avatars.discourse-cdn.com/v4/letter/b/da6949/32.png) [@bkh](https://forum.fudiabetes.org/u/bkh)
#### Post date: [July 1, 2019, 3:41pm UTC](https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788/4 "2019-07-01T15:41:27Z")

</div>

There’s a sensible analysis of the situation at Heathline.

> **[FDA: Medtronic's Old Diabetes Devices Are Not Secure](https://www.healthline.com/diabetesmine/fda-medtronic-old-diabetes-devices-not-cybersecure)**
>
> The FDA issues a field safety notice on older Medtronic insulin pumps, saying they are not cyber-secure and pose risks to people with diabetes.

Personally, I was interpreting the sudden announcement as Medtronic’s second step to try to reestablish control over the loopers; the first being their provision of funding and influential personnel to the Tidepool LOOP project. After all, there are strong profit-driven reasons to keep the design of the user interface, feature set, and algorithms in the hands of a few corporations. Kind of like IBM’s “customer control” philosophy back in the computer mainframe era, before personal computing enabled widespread competition to drive down the cost of hardware and software.

---

<div class="post-metadata">

### Author: ![TravelingOn](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/travelingon/32/1583_2.png) [@TravelingOn](https://forum.fudiabetes.org/u/TravelingOn)
#### Post date: [July 2, 2019, 6:07am UTC](https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788/5 "2019-07-02T06:07:45Z")

</div>

> [@bkh](#):
>
> After all, there are strong profit-driven reasons to keep the design of the user interface, feature set, and algorithms in the hands of a few corporations.

I believe you’ve cracked the code.

Why ever would a company want to allow its outdated (or even current) equipment models to be used without their oversight and ability to turn a profit?

This is interesting. Thanks for sharing!

---

<div class="post-metadata">

### Author: ![dm61](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/dm61/32/1602_2.png) [@dm61](https://forum.fudiabetes.org/u/dm61)
#### Post date: [July 2, 2019, 2:52pm UTC](https://forum.fudiabetes.org/t/fda-recalls-minimed-508-and-paradigm-pumps-due-to-cybersecurity-concerns/7788/6 "2019-07-02T14:52:37Z")

</div>

Thanks for posting the Heathline article, which is indeed a rare if not unique sensible article about the Medtronic/FDA safety notice related to the years-old-turned-urgent issue. The article still misses to explicitly mention what I think is the main and likely the only reason for the notice, which is to mitigate exposure to legal liability around the use of their pumps in DIY systems. The number of people using the old pumps in DIY systems has grown to thousands. Suppose one of these people has a serious incident. Was this due to user error, pump or infusion set malfunction, DIY system algorithm bug or malfunction, erroneous CGM reading, or something else? Probably very difficult if not impossible to tell with any certainty. With the safety notice, Medtronic is preemptively saying that they have nothing to do with their pumps used in DIY systems - they warned us not to use these pump.

Of course they are making other complementary profit-driven market-dominance motivated moves, including the partnership with Tidepool.
