Centricity Cardiology CA1000 (GE Healthcare) – Security Vulnerability (2025)

Check Your Product

According to the U.S. Food and Drug Administration (FDA)

Reason for Recall

As stated by FDA

There is a potential security vulnerability in Centricity Universal Viewer (UV), Centricity PACS-IW (PACS-IW), Centricity Radiology RA600 (RA600), & Centricity Cardiology CA1000 (CA1000) where the service login credentials are able to be identified which could allow a malicious actor with these credentials to access the system and potentially manipulate patient data.

Recommended Action

Per FDA guidance

GE Healthcare issued an URGENT MEDICAL DEVICE CORRECTION notice to its consignees on 02/19/2025 by letter delivered using traceable means. The notice explained the issue, safety issue, and requested the following actions be taken: "You can continue to use your device. Please ensure all potential users in your facility are made aware of this safety notification. Please ensure you have implemented the actions below: 1: Ensure your hospital network is secure and 2: Outside of the hospital network implement additional safeguards such as a VPN. Please retain this document for your records. Please complete and return the attached acknowledgement form to recall.85480@gehealthcare.com." "If you have any questions or concerns regarding this notification, please contact GE HealthCare Service at 1-800-437-1171 or your local Service Representative." Per status report 05/23/2025, the firm send a follow-up notice dated 05/13/2025 providing an installation manual addendum that provides instructions for changing passwords.