GE Healthcare Centricity Cardiology CA1000 (CA1000), Model Numbers: 1) 2033901-001; 2) 2038437-001; 3) 2038437-009; 4) 2

FDA device recall Z-1486-2025 · posted 2025-03-28 · Open, Classified

Recall details

Recalling firm

GE Healthcare

Reason for recall

There is a potential security vulnerability in Centricity Universal Viewer (UV), Centricity PACS-IW (PACS-IW), Centricity Radiology RA600 (RA600), & Centricity Cardiology CA1000 (CA1000) where the service login credentials are able to be identified which could allow a malicious actor with these credentials to access the system and potentially manipulate patient data.

Action taken

GE Healthcare issued an URGENT MEDICAL DEVICE CORRECTION notice to its consignees on 02/19/2025 by letter delivered using traceable means. The notice explained the issue, safety issue, and requested the following actions be taken: "You can continue to use your device. Please ensure all potential users in your facility are made aware of this safety notification. Please ensure you have implemented the actions below: 1: Ensure your hospital network is secure and 2: Outside of the hospital network implement additional safeguards such as a VPN. Please retain this document for your records. Please complete and return the attached acknowledgement form to recall.85480@gehealthcare.com." "If you have any questions or concerns regarding this notification, please contact GE HealthCare Service at 1-800-437-1171 or your local Service Representative." Per status report 05/23/2025, the firm send a follow-up notice dated 05/13/2025 providing an installation manual addendum that provides instructions for changing passwords.

Root cause

Software design

Status

Open, Classified

Product code

LLZ

Quantity affected

633 units

Distribution

Worldwide distribution.

Date initiated

2025-02-19

Date posted

2025-03-28

Location

Chicago, IL

Related 510(k) clearances