IMPORTANT FIELD SAFETY NOTIFICATION
MiniMed™ Paradigm™ Series Insulin Pumps Cybersecurity Concerns, DOWNLOAD
July 02, 2019
Dear Valued Customer:
You are receiving this letter because our records indicate you may be using a Medtronic MiniMed™ Paradigm™712, 715, 722 or 754 insulin pumps. Because your safety is our top priority, we are making you aware of a potential cybersecurity risk.
Potential cybersecurity risk:
The MiniMed™ Paradigm™ 712, 715, 722 or 754 insulin pumps are designed to communicate using a wireless radio frequency (RF) with other devices such as a blood glucose meter, glucose sensor transmitters, CareLink USB devices, and remote programmers.
Security researchers have identified potential cybersecurity vulnerabilities related to these insulin pumps. An unauthorized person with special technical skills and equipment could potentially send RF signals to a nearby insulin pump to change settings and control insulin delivery. This could lead to hypoglycaemia (if additional insulin is delivered) or hyperglycaemia and diabetic ketoacidosis (If not enough insulin is delivered).
IMPORTANT NOTE: We have received no reports of unauthorized people changing settings or controlling insulin delivery.
We recommend you take the following precautions to minimize the potential for a cybersecurity attack:
- Do not share your pump serial number.
- Be attentive to pump notifications, alarms, and alerts.
- Immediately cancel any unintended boluses.
- Monitor your blood glucose levels closely and act as appropriate.
- Do not connect to any third-party devices or use any software not authorized by Medtronic.
- Disconnect your CareLink USB device from your computer when it is not being used to download data from your pump
These pump models ARE vulnerable to this potential issue:
MiniMedTM ParadigmTM 712 pumps
MiniMedTM ParadigmTM 715 pumps
MiniMedTM ParadigmTM 722 pumps
MiniMed™ Paradigm™ Veo™ 754 pumps with Software Versions 2.6A or lower
These pump models are NOT vulnerable to this issue:
MiniMed™ Paradigm™ Veo /754 with Software Versions 2.7 or greater
To find the software version for the MiniMedTM Paradigm™ Veo /754 pumps, go to the STATUS screen:
MiniMedTM 620G pump
MiniMedTM 640G pump
MiniMedTM 670G pump
Your safety and complete satisfaction are our top priorities. We are committed to delivering safe and effective therapies. We appreciate your time and attention in reading this important notification.
As always, we are here to support you. If you have further questions or need assistance, please call our Helpline at: 1800-209-6777 from 9:30am to 6:30pm, Monday to Friday & 1st & 3rd Saturday or Contact to your Immediate Medtronic person.
Vice President, Quality Assurance
Medtronic takes customer safety and device security very seriously. Due to this potential cybersecurity issue, Medtronic is recommending customers speak with their healthcare provider (HCP) about changing to a newer model insulin pump.
Due to this potential cybersecurity issue, Medtronic is recommending customers speak with their healthcare provider (HCP) about changing to a newer model insulin pump with increased cybersecurity protection, like the MiniMed™ 640G insulin pump.
In the meantime, we recommend you take the cybersecurity precautions to minimize the potential risks.
The MiniMed™ Paradigm™ series insulin pumps are designed to communicate using a wireless radio frequency (RF) with other devices such as a blood glucose meter, glucose sensor transmitters, and CareLink™ USB devices.
Security researchers have identified potential cybersecurity vulnerabilities related to the communication protocol in these insulin pumps. An unauthorized person with special technical skills and equipment could potentially connect wirelessly to a nearby insulin pump to change settings and control insulin delivery. This could lead to hypoglycemia (if additional insulin is delivered) or hyperglycemia and diabetic ketoacidosis (if not enough insulin is delivered).
To find the software version for the MiniMed™ Paradigm™ pumps, go to the STATUS screen:
To open the STATUS screen, press ESC until the STATUS screen appears. To view more text on the STATUS screen, press the up or down arrow to scroll and view all the information. To exit the STATUS screen, press ESC until the STATUS screen disappears.
We have notified the appropriate regulatory authorities, published an advisory about this potential security concern, and informed healthcare professionals and patients about precautionary steps that can be taken to protect the security of their pump.
As part of our commitment to customer safety and device security, Medtronic works closely with industry regulators and researchers to anticipate and respond to potential risks. In addition to our ongoing work with the security community, we have already made several important changes to enhance device security with our newer devices available in some countries today. We will continue to take steps to collaborate with industry researchers and regulators to improve device safety.
Medtronic takes customer safety and device security very seriously. We have already introduced a new generation of insulin pumps that is not affected by this issue.
No. This vulnerability does not impact the MiniMed™ 600 series insulin pumps because they use encrypted communication which is completely different from the communication used by the Paradigm pump models.
The MiniMed™ 600 series insulin pumps include the MiniMed™ 630G and MiniMed™ 670G systems in the US and the MiniMed™ 620G and 640G systems outside of the US.
If you feel concerned:
Keep your insulin pump and the devices that are connected to your pump within your control at all times.
Do not share your pump serial number.
Be attentive to pump notifications, alarms, and alerts.
Immediately cancel any unintended boluses.
Monitor your blood glucose levels closely and act as appropriate.
Do not connect to any third-party devices or use any software not authorized by Medtronic.
Disconnect your CareLink™ USB device from your computer when it is not being used to download data from your pump.
Get medical help right away if you experience symptoms of severe hypoglycemia or diabetic ketoacidosis, or suspect that your insulin pump settings, or insulin delivery changed unexpectedly.
Every person with diabetes should make decisions about their insulin pump therapy along with their healthcare team. We recommend you talk about this with your healthcare team.
URGENT MEDICAL DEVICE RECALL
Notification Letter - Medtronic MiniMed Infusion Sets (ARTG 119216)
Potential over-delivery of insulin
11 September, 2017
Dear Valued Customer:
Because the safety of our customers is our top priority, Medtronic, in consultation with the Therapeutic Goods Administration (TGA) and Medsafe, is initiating a recall for specific Lot Numbers of infusion sets used with Medtronic insulin pumps (TGA Recall Identification # RC-2017-RN-01182-1) and Medsafe Reference # 21954).
Explanation of the Issue Medtronic has become aware of recent reports of potential over-delivery of insulin shortly after an infusion set change. Over-delivery of insulin can cause hypoglycaemia and in extreme cases, death. Medtronic has received reports of hypoglycaemia requiring medical intervention potentially related to this issue. Out of the millions of infusion sets sold each year, the reported incident rate requiring medical assistance related to this issue is less than 0.00005%. There have been no reports of death related to this matter.
Our investigation has shown this issue can be caused by fluid blocking the infusion set membrane during the priming/fill-tubing process. A membrane blocked by fluid most likely occurs if insulin, alcohol, or water is spilled on the top of the reservoir or inside the tubing connector which then could prevent the infusion set from working properly. Infusion sets currently being shipped by Medtronic contain a new and enhanced membrane material that significantly reduces this risk.
Actions Required by You
A. Go to https://checklots.medtronicdiabetes.com to determine if you have recalled infusion sets. You will be prompted to enter the REF and LOT numbers for all infusion sets in your possession. The website will then tell you which infusion sets are part of this recall and which are not. Please follow the instructions on the website.
B. Please do not use recalled infusion sets.
- If you have new and enhanced infusion sets that are not part of this recall, use only those sets starting with your next set change. As a reminder, we have enclosed Key Steps regarding the priming/fill-tubing process.
- If you only have recalled infusion sets right now, it is very important that you carefully follow the Key Steps enclosed in this letter.
C. If you do not have internet access please call the Global Help Line on 1800 777 808 and press option 1 [ If you are calling from New Zealand - 0800 633 487]. Tell the helpline how many recalled boxes you have and provide the Lot Numbers (on the box or pouch). We will check the Lot Numbers on the website whilst you are on the phone
D. Medtronic will replace the recalled boxes free of charge
E. Please do not return any infusion sets
F. For our records it is very important that you cut out the bar codes on the boxes of recalled infusion sets (as per above picture) and return the bar codes in the reply paid envelopes that will be sent out with the new infusion sets.
G. Please throw away recalled infusion sets.
You can also report an adverse event or product complaint to the Medtronic Global Helpline on 1800 777 808 and press option 1 [ If you are calling from New Zealand - 0800 633 487].
Medtronic considers patient safety and customer satisfaction our top priorities. We appreciate your time and attention in reading this important notification.
Vice President, Quality Assurance
FREQUENTLY ASKED QUESTIONS
Q1. Is this a recall?
Yes, this is a recall because your safety is our top priority. We are notifying all customers along with their corresponding healthcare providers. You can check to see if your infusion sets are part of the recall by visiting https://checklots.medtronicdiabetes.com
Please do not use any recalled infusion sets. Medtronic will replace the recalled infusion sets free of charge.
Q2. What is better about new infusion sets not affected by the recall that will help prevent this issue?
The infusion sets unaffected by the recall and being shipped to customers now, have a new membrane, and our investigation shows that this significantly reduces the likelihood of a blocked membrane during the priming/fill-tubing process.
Q3. How common is this problem?
Out of the millions of infusions sets sold every year, the reported incidence rate requiring medical assistance related to this issue is less than 1 in every 2 million infusion sets. The infusion sets being shipped today are not impacted by this recall. We are voluntarily issuing this recall to ensure that our customers have the best products and a good experience on insulin pump therapy.
Q4. Am waiting for my replacement units to arrive. Can I continue to use the infusion sets from these recalled lots?
Please do not use your recalled infusion sets. Please use only infusion sets starting with your next infusion set change.
If you only have recalled infusion sets, it is very important to carefully follow the instructions within the Key Steps regarding the priming/fill-tubing process.
Q5. What do I do if I don’t feel comfortable using the recalled infusion sets until the replacement sets arrive?
You may choose to revert to your back-up injection plan according to your healthcare provider’s directions until your replacement infusion sets arrive.
Q6. What do I do about ordering supplies?
It is essential that you continue to order your infusion sets as you usually do, even if you are expecting replacement infusion sets. If you have a current supply order, do not cancel it.
Please note that replacement sets may take longer to receive than your normal shipments. You may not receive all your replacements at once. All infusion sets you receive moving forward will be unaffected by this recall.
Infusion Set Priming / Fill-tubing Process
To avoid potential over-delivery of insulin shortly after an infusion set change
It is very important to follow the steps below to prevent fluid from getting on the infusion set membrane during the priming/fill-tubing process:
a. After filling the reservoir, make sure the vial of insulin is held upright when removing the reservoir from the blue transfer guard. This prevents insulin from accidently getting on the top of the reservoir, which could be transferred onto the infusion set membrane.
b. If any liquid (such as insulin, isopropyl alcohol, or water) gets on the top of the reservoir or inside the tubing connector, it can block the infusion set membrane. This may lead to increased pressure inside the pump's reservoir chamber during the priming/fill-tubing process. This may potentially lead to over-delivery of insulin shortly after the infusion set change. If liquid is visible on top of the reservoir or inside the tubing connector, start over with a new reservoir and infusion set.
If you notice anything unusual after the priming/fill-tubing process, such as insulin continuing to drip or squirt from the infusion set cannula, do not insert. Start over with a new reservoir and infusion set.
Best Practices for Changing Your Infusion Set Include:
- Do not change your infusion set before going to sleep so that you are able to monitor your glucose levels.
- As an extra precaution, check your blood glucose at 1 hour after your infusion set change in addition to your routine monitoring.
Following these best practices will allow you to identify potential hypoglycaemia and hyperglycaemia so you can take necessary action.
URGENT: RECALL FOR PRODUCT CORRECTION
(No product return is required)
Dear Valued Customer:
Medtronic, in consultation with the Therapeutic Goods Administration (TGA), is initiating a Recall for Product Correction (TGA Reference Number RC-2017-RN-00661-1) for its MiniMed® 640G insulin pumps. Please note, pumps are not being recalled from the market.
Medtronic is committed to keeping you and your healthcare professional informed of potential issues and associated solutions related to our products and services. The purpose of this letter is to inform you of a rare and temporary condition potentially affecting your MiniMed® 640G insulin pump.
Medtronic has identified thatthe keypad buttons on your MiniMed® 640G insulin pump may become temporarily stuck and unresponsive. You do not need to return or replace your pump. We do ask that you read the important information below to help you understand when this situation might happen, and how to resolve it.
How does the keypad become temporarily unresponsive?
Keypad buttons on the MiniMed® 640G insulin pump may become temporarily unresponsive when the atmospheric pressure around the pump increases or decreases rapidly. This would most likely happen when traveling in an airplane during take-off or landing. If this happens, in most cases you may not even notice because the pump will resolve this on its own.
How will I notice if this happens to my pump?
During this temporary situation, a button may be too difficult to press down or a button can look like it is pressed and stuck in that position.
- If you notice the keypad buttons are difficult to press down, the pump will continue to deliver your basal insulin. You may not be able to program a bolus or suspend delivery as the buttons temporarily will not press down, but this will resolve on its own, usually within 30 minutes.
- If a button is stuck in a pressed position, after three (3) minutes a “Stuck Button” alarm is triggered which suspends insulin delivery (including basal insulin). You may not be able to clear the alarm as the keypad is unresponsive. In the rare situation where this continues for more than ten (10) minutes, the pump will begin to siren.
Once the alarm is triggered and insulin is suspended, you will be unable to program a bolus or resume insulin delivery until the alarm is cleared.
The above could theoretically result in hypo or hyper glycaemia – close monitoring is advised and use of emergency kit insulin or disconnection of device may be required.
What should I do if this happens to my pump?
If you experience this temporary keypad condition, and want to resolve it immediately to bolus or clear the alarm, remove the battery cap from the pump and then place it back on.
PLEASE NOTE: You should have a fresh new AA battery available in case your pump prompts you to insert a new battery.
What if I have more questions?
If you have other questions or concerns, you can find an FAQ and a copy of this letter at https://www.medtronic-diabetes.com.au/customer-support/safety-information You can also always reach the Medtronic Helpline at 1800 777 808(9:30am to 6:30pm, Monday to Friday and 1st and 3rd Saturday excluding Public holidays).
Note: This only applies to the MiniMed® 640G insulin pump. The MiniMed® Paradigm insulin pumps are not affected by this condition.
Medtronic considers patient safety and customer satisfaction our primary priorities. We appreciate your time and attention in reading this important notification.
Medtronic, in consultation with the Therapeutic Goods Administration (TGA) is initiating a Recall for Product Correction. Please note, no actual product return is required and the pumps are not being physically recalled from the market.
No, you do not have to replace your pump unless the action of removing and replacing the battery cap does not resolve the problem. If this does not relieve the pressure and the keypad does not function as normal, please call your local HelpLine to trouble shoot and find out what next steps should be taken.
The easiest thing to do if you are not experiencing a “Stuck Button” alarm is to wait for the pump to resolve the issue on its own. However, we acknowledge that you may want to resolve this issue quickly, therefore the solution is to remove the battery cap and put it back on the pump.
This is a very rare and temporary condition. However, if you wish to avoid this completely while in flight, you should temporarily remove the battery cap during take-off and landing and only place it back on after your flight has leveled in altitude. Remember: It is recommended to have extra new batteries and a backup therapy particularly when you travel in the unlikely event that your pump is unavailable.
This is a rare situation and we do not expect this to happen in most cases. However, because of the potential therapy interruption and simple solution, we have chosen to make our patients aware of this condition. Remember: It is recommended to have extra new batteries and a backup therapy particularly when you travel in the unlikely event that your pump is unavailable.
The best action for ensuring therapy is not or is minimally interrupted for this situation is to: a) Always carry a fresh new AA battery for the pump b) Always carry an HCP-prescribed back up therapy in the unlikely event the pump is not available.
Your pump will only stop delivering insulin if a button is stuck in a pressed position forthree (3) minutes and a “Stuck Button” alarm is triggered which suspends insulin. In the case where the keypad buttons are difficult to press down, your insulin delivery will not be interrupted.
No, the p-cap feature on the reservoir allows the insulin reservoir compartment to equalise presser faster than the rest of the body of the pump. Therefore, the delivery of insulin will continue as usual unless the pump keypad is stuck and alarming.
If removing and replacing the battery cap does not resolve keypad responsiveness, please call your local HelpLine on 1800-777-808.
URGENT: RECALL FOR PRODUCT CORRECTION
(No product return is required)
Medtronic, in consultation with the Therapeutic Goods Adminstration (TGA) is initiating a Recall for Product Correction (TGA Reference number RC-2017-RN-00167-1) for its MiniMed 640G insulin pumps. Please note that physical product is not being recalled from the market.
Medtronic is committed to keeping you and your healthcare professional informed of potential issues and associated solutions related to our products and services. The purpose of this letter is to inform you of an issue potentially affecting your MiniMed 640G insulin pump.
Medtronic has identified a software issue that could prevent the internal battery from charging in your pump. Should this software issue occur, an alarm is triggered and you will see the following ‘Power error detected’ message displayed on the pump screen:
If you experience this alarm and see the “Power error detected” message on your pump accompanied by the number “25”, please contact the Medtronic HelpLine team at 1800 777 808, option 1 for assistance with troubleshooting the error.
Do not ignore this alarm and error message, which means that your pump has now stopped delivering insulin. If you do not take action, you could develop dangerously high blood sugar levels (hyperglycaemia).
The Helpline will troubleshoot to determine the cause of the Power Error 25 alarm and guide the user to perform a pump reset process which will reset the condition that causes the software anomaly to occur. If necessary the Helpline will offer to replace your insulin pump.
Recommended actions to be taken:
- If you see a Power error 25 alarm, please contact the Medtronic Helpline at 1800 777 808, option 1.
- The Helpline will assist you in troubleshooting the alarm and determining the next steps, including the potential replacement of your pump.
- Please complete and return the attached acknowledgement form.
- Should you have any questions or concerns regarding this issue please do not hesitate to contact Medtronic HelpLine at 1800 777 808(9:30am to 6:30pm, Monday to Friday and 1st and 3rd Saturday excluding Public holidays), option 1 or your healthcare professional.
Note: This issue only affects Version 2.6 of the MiniMed 640G Pump. To check the version of your pump, please refer to the instructions below.
Instructions to Check Pump Version
- Select the button.
- Press up to highlight the icon bar
- Select the button.
- Highlight “Pump” and press the button
- Scroll down until you see “Version”
Your safety and complete satisfaction are our first priority and we appreciate your time and attention to this important notification.
If you’re using the MiniMed® 640G System^, you may receive an alert when performing a bolus, related to either having dangerously low Blood Glucose, dangerously high BG or are trying to deliver a large bolus (as shown in the pictures). It is important that you clear these alerts immediately so that you can correctly deliver the bolus. It is also important to never use data older than 12 minutes to determine a bolus amount.
A new user guide will be sent to all users over the coming weeks.
Please contact us on 1800 777 808 if you have any questions.
For more info, download the letter sent to MiniMed 640G users.