Cybersecurity Alert on Medtronic MiniMed Pump

FDA has issued a safety alert on a cybersecurity risk with Medtronic’s MiniMed 600 Series Insulin Pump System (e.g., MiniMed 630G and MiniMed 670G). “There is a potential issue associated with the communication protocol for the pump system that could allow unauthorized access to the pump system,” the alert says. If unauthorized access occurs, the device’s communication protocol could be compromised, which may cause the pump to deliver too much or too little insulin. 

The MiniMed 600 series pump system has components that communicate wirelessly (such as the insulin pump, continuous glucose monitoring transmitter, blood glucose meter, and CareLink USB device). So far, the agency is not aware of any reports related to the cybersecurity issue.

Additionally, Medtronic issued an Urgent Medical Device Correction to tell users about the risk, and it included actions and recommendations for users to take.