Bloomberg Law’s combination of innovative analytics, research tools and practical guidance provides you with everything you need to be a successful litigator.
Aug. 30 — St. Jude Medical was hit with a would-be class suit over its implantable cardiac devices, in the wake of a report that the pacemakers' home monitoring systems have serious cybersecurity vulnerabilities ( Ross v. St. Jude Medical, Inc., C.D. Cal., No. 16-6506, complaint 8/26/16 ).
St. Jude Medical, Inc. and related companies failed to protect device recipients from potential hackers, Illinois resident Clinton W. Ross Jr., alleges in an Aug. 26 complaint in the U.S. District Court for the Central District of California.
“We want to emphasize that patient safety is and has always been our top priority,” St. Jude said in a statement sent to Bloomberg BNA. “In this situation, we believe there are numerous inaccuracies in the complaint.”
Implantable cardiac devices like pacemakers and defibrillators monitor and correct heart conditions. Historically, patients had to see their doctors several times a year for monitoring.
Networking functions, also known as telemetry, allow remote collection via the Internet of the same information that would be collected during a physician office visit.
This offers convenience and cost savings, but also introduces security risks, the complaint said.
In August, short-seller Muddy Waters Capital LLC reported findings by cybersecurity company MedSec Holdings Ltd. regarding severe security vulnerabilities in St. Jude cardiac devices with telemetry capabilities, the complaint said.
According to the complaint, security flaws in St. Jude systems render patients susceptible to attacks including a “crash attack” that could remotely disable the device, or a “battery drain attack.”
Ross, who has a St. Jude Quadra Assura defibrillator, says he—at his physician's recommendation—unplugged the remote unit and doesn't intend to resume use of the remote features until the security issues are resolved.
Ross raises warranty, fraudulent concealment, negligence and unjust enrichment claims on behalf of a national class and an Illinois class of patients with implantable pacemakers and defibrillators.
However, St. Jude said in a statement that a video by Muddy Waters actually shows the device working properly.
“The video clearly shows a security feature, not a flaw,” Phil Ebeling, St. Jude’s chief technology officer, said in the statement. “The pacemaker is actually functioning as designed. If attacked, our pacemakers place themselves into a ‘safe’ mode to ensure the device continues to work.”
The threat of medical device hacking isn't new.
In 2013, former Vice President Dick Cheney said he had disconnected his defibrillator from the internet because of concerns about a hack.
Arias, Sanguinetti, Stahle & Torrijos LLP represents the plaintiff.
—With Assistance from Michelle Fay Cortez
To contact the reporter on this story: Julie A. Steinberg in Washington at firstname.lastname@example.org
To contact the editors responsible for this story: Steven Patrick at email@example.com
The complaint is available at http://www.bloomberglaw.com/public/document/Ross_v_St_Jude_Medical_Inc_et_al_Docket_No_216cv06465_CD_Cal_Aug_.
Copyright © 2016 The Bureau of National Affairs, Inc. All Rights Reserved.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to firstname.lastname@example.org.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to email@example.com.
Put me on standing order
Notify me when new releases are available (no standing order will be created)