GE HealthCare recalls legacy cardiology information systems due to security risk
GE HealthCare has announced a new recall of older models of its Muse Cardiology Information System due to a significant security risk. This only includes the Muse 5 system, a device old enough that GE HealthCare stopped providing regular technical support more than a decade ago.
The company first notified users in April, warning that the Muse 5 systems could potentially be accessed by an outside party. If this happened, it could give the outside party the ability to view and manipulate patient data.
The U.S. Food and Drug Administration (FDA) has classified this as a Class II recall, noting that it impacts approximately 4,200 Muse 5 systems. The FDA shared these details on June 10.
GE HealthCare shares a statement
“Patient safety is our top priority,” a company spokesperson told Cardiovascular Business. “We recently issued a voluntary recall on legacy Muse 5 systems that reached their end of service support in 2014 and are recommending that hospitals replace or upgrade these systems. There have been no injuries or unauthorized access to patient data reported to GE HealthCare as a result of this issue.”
If users do not want to upgrade their systems, the company is recommending that they at least implement strong security practices, including the use of a strong password. GE HealthCare also emphasized that all employees should be aware of this risk.
Additional context
The Muse Cardiology Information System is designed to help healthcare providers store, organize and manage patient data in one central location that can be accessed as needed by hospitals, cardiologists and other members of the care team.