Company: Medtronic Inc., Cardiac Rhythm and Heart Failure (CRHF)
Date of Enforcement Report: 3/25/2020
Class II

PRODUCT

Medtronic CareLink 2090 Programmer. Used to interrogate and program Medtronic and Vitatron implantable devices, such as pacemaker/ICD/CRT.

• Recall Number: Z-1524-2020

REASON

Medtronic Conexus Telemetry has been determined to contain two primary cyber vulnerabilities: improper access control and the cleartext transmission of sensitive information.

RECALLING FIRM/MANUFACTURER

Medtronic Inc., Cardiac Rhythm and Heart Failure (CRHF) on 1/30/2020. Voluntary:  Firm Initiated recall is ongoing.

VOLUME OF PRODUCT IN COMMERCE

23,180 devices

DISTRIBUTION

US Nationwide and International