Recall Z-0590-2025

Reason for recall

BD confirmed that product service credentials used by some BD technical support teams to access certain BD products were accessed by an unauthorized actor. Until these product service credentials are updated, there is a risk of unauthorized access that may impact the confidentiality, integrity and/or availability of the relevant products and associated data.

FDA-determined cause: Software design

Action taken

On October 31, 2024 URGENT" MEDICAL DEVICE PRODUCT CORRECTION letters were sent to consignees. IT, Safety and Security Actions to be Taken: BD encourages customers to follow best practices for maintaining strong security measures to protect hospital networks and medical devices including: "Ensure access to potentially vulnerable devices is limited to authorized personnel "Inform authorized users of issue, and ensure all relevant passwords are tightly controlled "Monitor and log network traffic attempting to reach medical device managementenvironments for suspicious activity "Where possible, isolate affected devices in a secure VLAN or behind firewalls with restrictedaccess that only permits communication with trusted hosts in other networks when needed "Impacted devices do not require use of RDP ports and these should be disabled or blockedif enabled "Ensure permissions on file shares are appropriately established and enforced, and monitorand log access for evidence of suspicious activity "Disconnect devices from the network if connectivity is not necessary Next Steps to be Taken by Customer: 1.Ensure the contents of this notification are read and understood. 2.Share and post this customer letter within your facility network including IT and safety andsecurity department. Forward to any customers to whom you may have distributed theproduct(s) to ensure awareness. 3.Complete the attached Customer Response Form and return it to the BD contact noted on theForm so that BD may acknowledge your receipt of this notification per FDA requirements. 4.Report any adverse health consequences experienced with the use of these products to BD.Events may also be reported to the FDA's MedWatch Adverse Event Reporting program via: Web: MedWatch website at www.fda.gov/medwatch Phone: 1-800-FDA-1088 (1-800-332-1088) Mail: MedWatch, HF-2, FDA, 5600 Fisher s Lane, Rockville, MD 20852-9787 If you require further assistance, please contact: Technical Service +1 888 451 5514 Technical Questi