FDA Adverse Event Malfunction Summary report: N

CARELINK CONNECT APP IOS

MDR report key: 17667934 · Received September 1, 2023

Report

Report Number
2032227-2023-265757
Event Type
Malfunction
Date Received
September 1, 2023
Date of Event
August 16, 2023
Report Date
March 22, 2024
Manufacturer
MEDTRONIC MINIMED
Product Code
PKU
Product Problem
Yes
Report Source
Manufacturer report
Reporter Location
AS
Reporter Occupation
003

Narratives

Additional Manufacturer Narrative · 0

INVESTIGATION/TESTING SUMMARY: AN ATTEMPT TO REPRODUCE THE REPORTED EVENT USING CARELINK PERSONAL BY REQUESTING AN MFA EMAIL FROM A TEST ACCOUNT IN PRODUCTION. THE ISSUE WAS NOT REPRODUCIBLE. THE SOFTWARE SUCCESSFULLY ADHERED TO THE SPECIFIED REQUIREMENTS AND PERFORMED IN ACCORDANCE WITH THE EXPECTATIONS SPECIFIED IN THE ""SW REQUIREMENTS DOC."" AFTER INVESTIGATING WITH THE SOFTWARE ENGINEERING TEAM, WE FOUND THAT THERE WAS AN INCORRECT CONFIGURATION ON THE NETWORK (ONECONNECT), WHICH CAUSED AN INCORRECT ASSOCIATION BETWEEN USERS ON REDIS IN CUMULUS. THIS MEANS EVERY TIME AN INCORRECT ASSOCIATION IS MADE, THE WRONG USERNAME IS USED IN THE MFA EMAIL. WE REMOVED ""ONECONNECT"" FROM PRODUCTION AND FLUSHED THE REDIS CACHE. THIS RESOLVED THE ISSUE FOR ALL USERS WITH INCORRECT ASSOCIATIONS. (MOST LIKELY) ROOT CAUSE: MISCONFIGURATION IN ONE CONNECT CAUSED AN INCORRECT ASSOCIATION MADE IN REDIS CACHE. ANALYSIS SUMMARY: THERE ARE MULTIPLE APIS IMPACTED BY MISCONFIGURATION IN ONECONNECT WHICH WILL BE REVIEWED WITH QUALITY. MEDTRONIC SUBMITS THIS REPORT TO COMPLY WITH FDA REGULATIONS 21 CFR PARTS 4 AND 803. MEDTRONIC HAS MADE REASONABLE EFFORTS TO PROVIDE AS MUCH RELEVANT INFORMATION AS IS AVAILABLE TO THE COMPANY AS OF THE SUBMISSION DATE OF THIS REPORT. THIS REPORT DOES NOT CONSTITUTE AN ADMISSION OR A CONCLUSION BY FDA, MEDTRONIC, OR ITS EMPLOYEES THAT THE DEVICE, MEDTRONIC, OR ITS EMPLOYEES CAUSED OR CONTRIBUTED TO THE EVENT DESCRIBED IN THE REPORT. ANY REQUIRED FIELDS THAT ARE UNPOPULATED ARE BLANK BECAUSE THE INFORMATION IS CURRENTLY UNKNOWN OR UNAVAILABLE. MEDTRONIC WILL SUBMIT A SUPPLEMENTAL REPORT IF ADDITIONAL RELEVANT INFORMATION BECOMES KNOWN.

Additional Manufacturer Narrative · 0

CURRENTLY IT IS UNKNOWN WHETHER OR NOT THE DEVICE MAY HAVE CAUSED OR CONTRIBUTED TO THE EVENT AS NO PRODUCT HAS BEEN RETURNED. NO CONCLUSION CAN BE DRAWN AT THIS TIME. WE THEREFORE CONSIDER THIS REPORT COMPLETE TO THE BEST OF OUR KNOWLEDGE. SELECT PATIENT INFORMATION CANNOT BE PROVIDED DUE TO REGIONAL PRIVACY REGULATIONS. MEDTRONIC, INC. (MEDTRONIC) IS SUBMITTING THIS REPORT TO COMPLY WITH 21 C.F.R. PART 803, THE MEDICAL DEVICE REPORTING REGULATION. THIS REPORT IS BASED UPON INFORMATION OBTAINED BY MEDTRONIC, WHICH THE COMPANY MAY NOT HAVE BEEN ABLE TO FULLY INVESTIGATE OR VERIFY PRIOR TO THE DATE THE REPORT WAS REQUIRED BY THE FDA. MEDTRONIC HAS MADE REASONABLE EFFORTS TO OBTAIN MORE COMPLETE INFORMATION IN THE TIME ALLOTTED AND HAS PROVIDED AS MUCH INFORMATION AS IS AVAILABLE TO THE COMPANY AS OF THE SUBMISSION DATE THIS REPORT. THIS REPORT DOES NOT CONSTITUTE AN ADMISSION OR A CONCLUSION BY FDA, MEDTRONIC, OR ITS EMPLOYEES THAT THE DEVICE, MEDTRONIC, OR ITS EMPLOYEES CAUSED OR CONTRIBUTED TO THE EVENT DESCRIBED IN THE REPORT. IN PARTICULAR, THIS REPORT DOES NOT CONSTITUTE AN ADMISSION BY ANYONE THAT THE PRODUCT DESCRIBED IN THIS REPORT HAS ANY "DEFECTS" OR HAS "MALFUNCTIONED". THESE WORDS ARE INCLUDED IN THE FDA 3500A FORM AND ARE FIXED ITEMS FOR SELECTION CREATED BY THE FDA, TO CATEGORIZE THE TYPE OF EVENT SOLELY FOR THE PURPOSE OF REPORTING PURSUANT TO PART 803. MEDTRONIC OBJECTS TO THE USE OF THESE WORDS AND OTHERS LIKE IT BECAUSE OF THE LACK OF DEFINITION AND THE CONNOTATIONS IMPLIED BY THESE TERMS. THIS STATEMENT SHOULD BE INCLUDED WITH ANY INFORMATION OR REPORT DISCLOSED TO THE PUBLIC UNDER THE FREEDOM OF INFORMATION ACT.

Description of Event or Problem · 0

INFORMATION RECEIVED BY MEDTRONIC INDICATED THAT THE CUSTOMER REPORTED WERE TRIED TO LOG IN AND RECEIVED A VERIFICATION CODE THAT WAS FOR SOMEONE ELSE AND REPORTED CYBERSECURITY AND/OR HACKING ALLEGATIONS. NO OTHER DETAILS WERE PROVIDED. TROUBLESHOOTING WAS PERFORMED. NO HARM REQUIRING MEDICAL INTERVENTION WAS REPORTED. THE CUSTOMER CONTINUED THE USE OF THE CARELINK PERSONAL AND WILL NOT BE RETURNED FOR ANALYSIS.

Devices

Seq Brand Generic Product Code Manufacturer Model Lot UDI-DI
1150006 CARELINK CONNECT APP IOS INSULIN PUMP SECONDARY DISPLAY PKU MEDTRONIC MINIMED MMT-6112

Patients

Seq Age Sex Outcome Treatment
1 NA Unknown