Senator Calls for Review of Cybersecurity Risks in Chinese-Made Medical Devices

Senator Tom Cotton has requested the FDA to investigate cybersecurity vulnerabilities in Chinese-made medical devices, particularly the Contec CMS8000 patient monitor. This device has been linked to data theft and remote hijacking, exposing American patients to risks such as identity theft and fraud. The FDA and CISA had previously warned about these vulnerabilities in January 2025, leading to a Class II recall of the device in May 2025. Despite the recall, thousands of these monitors remain in use. Cotton's letter emphasizes the need for enhanced scrutiny of medical devices cleared before March 2023, as new cybersecurity requirements were only implemented then. This request follows a broader investigation initiated by Texas Governor Greg Abbott into foreign-manufactured medical devices, particularly focusing on cybersecurity risks. The ongoing investigation is part of a larger effort to protect public health and national security from potential threats posed by adversarial nations.

Key Points: • Senator Tom Cotton urged the FDA to review cybersecurity vulnerabilities in Chinese medical devices. • The Contec CMS8000 patient monitor has been linked to data theft and unauthorized remote access. • A Class II recall was issued for the CMS8000 in May 2025, but thousands remain in use.