—#210851

Product

BD COR PX Instrument Version or Model: 443988 Catalog Number: 443988

FDA product code: MAQ — Kit, Dna Detection, Human Papillomavirus
Device class: Class 3
Medical specialty: Unknown
PMA numbers: P160037S005
Affected lot / code info: Catalog No: 443988; UDI-DI: 00382904439880; Serial Numbers: CRP0007, CRP0025, CRP0045, CRP0064, CRP0058, CRP0060, CRP0055, CRP0040, CRP0056, CRP0038, CRP0057, CRP0062, CRP0046, CRP0031, CRP0068, CRP0053, CRP0034, CRP0041, CRP0021, CRP0054, CRP0004, CRP0001, CRP0008, CRP0009, CRP0012, CRP0013, CRP0014, CRP0017, CRP0018, CRP0048, CRP0051, CRP0027, CRP0042, CRP0069, CRP0074, CRP0032, CRP0075, CRP0077, CRP0080, CRP0079, CRP0024, CRP0011, CRP0010, CRP0016, CRP0019, CRP0028, CRP0061, CRP0063, CRP0033, CRP0044, CRP0066, CRP0067, CRP0071, CRP0043, CRP0003, CRP0026, CRP0036, CRP0050, CRP0049, CRP0070, CRP0065, CRP0059, VSP0010, CRP0052, CRP0073, CRP0072.

Why it was recalled

BD confirmed that product service credentials used by some BD technical support teams to access certain BD products were accessed by an unauthorized actor. Until these product service credentials are updated, there is a risk of unauthorized access that may impact the confidentiality, integrity and/or availability of the relevant products and associated data.

Root cause (FDA determination)

Software design

Action the firm took

On October 31, 2024 URGENT" MEDICAL DEVICE PRODUCT CORRECTION letters were sent to consignees. IT, Safety and Security Actions to be Taken: BD encourages customers to follow best practices for maintaining strong security measures to protect hospital networks and medical devices including: "Ensure access to potentially vulnerable devices is limited to authorized personnel "Inform authorized users of issue, and ensure all relevant passwords are tightly controlled "Monitor and log network traffic attempting to reach medical device managementenvironments for suspicious activity "Where possible, isolate affected devices in a secure VLAN or behind firewalls with restrictedaccess that only permits communication with trusted hosts in other networks when needed "Impacted devices do not require use of RDP ports and these should be disabled or blockedif enabled "Ensure permissions on file shares are appropriately established and enforced, and monitorand log access for evidence of suspicious activity "Disconnect devices from the network if connectivity is not necessary Next Steps to be Taken by Customer: 1.Ensure the contents of this notification are read and understood. 2.Share and post this customer letter within your facility network including IT and safety andsecurity department. Forward to any customers to whom you may have distributed theproduct(s) to ensure awareness. 3.Complete the attached Customer Response Form and return it to the BD contact noted on theForm so that BD may acknowledge your receipt of this notification per FDA requirements. 4.Report any adverse health consequences experienced with the use of these products to BD.Events may also be reported to the FDA's MedWatch Adverse Event Reporting program via: Web: MedWatch website at www.fda.gov/medwatch Phone: 1-800-FDA-1088 (1-800-332-1088) Mail: MedWatch, HF-2, FDA, 5600 Fisher s Lane, Rockville, MD 20852-9787 If you require further assistance, please contact: Technical Service +1 888 451 5514 Technical Questi

Recalling firm

Firm: Becton Dickinson & Co.
Address: 7 Loveton Cir, Sparks, Maryland 21152-9212

Distribution

Distribution pattern: Worldwide distribution - US Nationwide and the countries of Algeria, Argentina, Armenia, Australia, Austria, Azerbaijan, Bahrain, Bangladesh, Belarus, Belgium, Benin, Bhutan, Bolivia, Bosnia and Herzegovina, Botswana, Brazil, Brunei, Bulgaria, Burkina Faso, Burundi, Cambodia, Cameroon, Canada, Chile, China, Colombia, Costa Rica, Cote d'Ivoire, Croatia, Cyprus, Czech Republic, Democratic Republic of the Congo, Denmark, DOM, Dominica, Dominican Republic, Ecuador, Egypt, El Salvador, Estonia, Ethiopia, Faroe Islands, Fiji, Finland, France, French Guiana, Gambia, Georgia, Germany, Ghana, Greece, Guadeloupe, Guam, Guatemala, Guinea, Guyana, Haiti, Honduras, Hong Kong, Hungary, Iceland, India, Indonesia, Iran, Iraq, Ireland, Israel, Italy, Jamaica Japan, Jordan, Kazakhstan, Kenya, Kosovo, Kuwait, Kyrgyzstan, Laos, Latvia, Lebanon Liberia, Libyan Arab Jamahiriya, Liechtenstein, Lithuania, Luxembourg, Macau, Madagascar Malawi, Malaysia, Maldives, Mali, Malta, Martinique, Mauritania, Mauritius, Mayotte Mexico, MKD, Moldova, Mongolia, Morocco, Mozambique, Namibia, Nepal, Netherlands Antilles, New Caledonia, New Zealand, Nicaragua, Nigeria, Northern Mariana Islands, Norway, Oman, Pakistan, Panama, Papua new Guinea, Paraguay, Peru, Philippines PNG, Poland, Portugal, Puerto Rico, Qatar, Reunion, Romania, Russia, Rwanda, Saint Helena San Marino, Saudi Arabia, Senegal, Serbia, Seychelles, Sierra Leone, Singapore, Slovakia Slovenia, South Africa, South Korea, Spain, Sri Lanka, Sudan, Swaziland, Sweden, Switzerland, Syrian Arab Republic, Taiwan, Tajikistan, Tanzania, United Republic of Thailand, Timor-Leste, Tonga, Trinidad And Tobago, Tunisia, Turkey, Turkmenistan Uganda, Ukraine, United Arab Emirates, United Kingdom, Uruguay Uzbekistan, Vietnam, Yemen, Zambia, Zimbabwe.

Timeline

Recall initiated: 2024-10-31
Posted by FDA: 2024-12-03
Status: —

Source: openFDA Device Recall endpoint. Recall record ID #210851. The FDA issues recall classifications as health-hazard assessments, not legal findings; for legal claims consult a licensed attorney.