Start Shopping

Potential for Security Breach on the Animas® OneTouch Ping® Glucose Management System

Untitled 1

Potential for Security Breach on the Animas® OneTouch Ping® Glucose Management System

Johnson & Johnson recently sent a letter to users warning them of the potential for a hacker to change the programming of the Animas® OneTouch Ping® Insulin Pump. This hack or program change could be used to deliver a fatal dose of insulin to a patient. Read the text of the letter obtained by Reuters at http://www.reuters.com/article/us-johnson-johnson-cyber-insulin-pumps-t-idUSKCN12414G.

According to the report by Reuters, Jay Radcliffe, a Type I diabetic and researcher with cyber security firm Rapid7, said he had identified ways for a hacker to spoof communications between the remote control and the OneTouch Ping® Insulin Pump, potentially forcing it to deliver unauthorized insulin doses.

According to Radcliffe, the vulnerability of the system stems from the fact that communications between the remote control and the pump are not encrypted (scrambled). Such encryption would prevent hackers from accessing the device.

This vulnerability was confirmed by Brian Levy, Chief Medical Officer with J&J's Diabetes Unit, when he verified that company technicians were able to replicate Radcliffe's findings. Indeed, a hacker could order the pump to dispense insulin from as close as 25 feet. Levy seemed intent on putting patients' minds at ease when he noted that such attacks require specialized technical expertise and sophisticated equipment, thus making them difficult to execute.

"The probability of unauthorized access to the OneTouch Ping® system is extremely low," the company said in letters sent to doctors and roughly 114,000 patients in the U.S. and Canada. "It would require technical expertise, sophisticated equipment and proximity to the pump, as the OneTouch Ping® system is not connected to the internet or to any external network."

Here is the link to Jay Radcliffe's Blog: https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump

Follow this link to hear an interview of Animas Medical Director, Dr. Brian Levy, by Stacey Simms on the Diabetes Connection web site: http://traffic.libsyn.com/diabetesconnections/Ep_70_5_Final_Animas_Ping.mp3?dest-id=279073

DDP Medical Supply, as your business partner, will strive to keep you informed of important information that can affect both you and your patients.