WASHINGTON — The federal government issued a warning about a medical device that could be tampered with by hackers. The FDA and Department of Homeland Security issued a statement late last week that “strongly encourages” health care facilities to discontinue the use of a particular I-V infusion pump after it was discovered the devices are vulnerable to cyber security threats.
The warning says the computerized pumps produced by Hospira–which continuously deliver medication over an extended period–could possibly be accessed remotely through a hospital’s network.
Andy Syrewicze, senior cloud services engineer with Trivalent Group in Grandville, said hack threats against medical devices like pacemakers or medication pumps and other technology are unfortunately part of the new and ever-connected “normal” in which we now live.
“We’re definitely starting to see the proliferation of this concept we call ‘The Internet of Things,’” Syrewicze said. “It’s the idea that any device, no matter how small, can be connected to the Internet.”
This latest warning from the FDA comes at a time of growing concerns over possible breaches that can extend well beyond credit card or personal information. Last week, Detroit automaker Chrysler recalled more than 1 million vehicles after hackers were able to successfully tap into a car and control it over the Internet.
“As developers and manufacturers of these devices continue to work on strengthening their product and making it more secure, you’re going to have this cat-and-mouse game, with hackers and attackers trying to find ways to get around those new innovations,” Syrewicze said.
“If a device is listening wirelessly or has some sort of access capability, there is someone who is going to figure out a vulnerability for that device. It’s almost impossible to protect against everything.”