{"id":35633,"date":"2022-06-03T22:09:20","date_gmt":"2022-06-03T22:09:20","guid":{"rendered":"https:\/\/harchi90.com\/illumina-cybersecurity-vulnerability-may-present-risks-for-patient-results-and-customer-networks-letter-to-health-care-providers\/"},"modified":"2022-06-03T22:09:20","modified_gmt":"2022-06-03T22:09:20","slug":"illumina-cybersecurity-vulnerability-may-present-risks-for-patient-results-and-customer-networks-letter-to-health-care-providers","status":"publish","type":"post","link":"https:\/\/harchi90.com\/illumina-cybersecurity-vulnerability-may-present-risks-for-patient-results-and-customer-networks-letter-to-health-care-providers\/","title":{"rendered":"Illumina Cybersecurity Vulnerability May Present Risks for Patient Results and Customer Networks: Letter to Health Care Providers"},"content":{"rendered":"<div id=\"main-content\">\n<div class=\"col-md-8 col-md-push-2\" role=\"main\">\n<p>June 2, 2022<\/p>\n<p>The US Food and Drug Administration (FDA) is informing laboratory personnel and health care providers about a cybersecurity vulnerability affecting software in the Illumina NextSeq 550Dx, the MiSeqDx, the NextSeq 500, NextSeq 550, MiSeq, iSeq, and MiniSeq, next generation sequencing instruments .  These instruments are medical devices that may be specified either for clinical diagnostic use in sequencing a person&#8217;s DNA or testing for various genetic conditions, or for research use only (RUO).  Some of these instruments have a dual boot mode that allows a user to operate them in either clinical diagnostic mode or RUO mode.  Devices intended for RUO are typically in a development stage and must be labeled \u201cFor Research Use Only.  Not for use in diagnostic procedures. &#8221;  &#8211; though many laboratories may be using them with tests for clinical diagnostic use.<\/p>\n<p>The cybersecurity vulnerability affects the Local Run Manager (LRM) software.  An unauthorized user could exploit the vulnerability by:<\/p>\n<ul>\n<li>taking control of the instrument remotely;<\/li>\n<li>operating the system to alter settings, configurations, software, or data on the instrument or a customer&#8217;s network;  or<\/li>\n<li>impacting patient test results in the instruments intended for clinical diagnosis, including causing the instruments to provide no results or incorrect results, altered results, or a potential data breach.<\/li>\n<\/ul>\n<p>Illumina has developed a software patch to protect against the exploitation of this vulnerability and is working to provide a permanent software fix for current and future instruments.  The FDA wants laboratory personnel and health care providers to be aware of the required actions to mitigate these cybersecurity risks.<\/p>\n<h2>Recommendations<\/h2>\n<ul>\n<li>Review the Urgent Safety Notification or Product Quality Notification (for RUO Customers) sent by Illumina on May 3, 2022 to affected customers.  If you did not receive a notification from Illumina, but believe you should have, please contact techsupport@illumina.com.<\/li>\n<li>Immediately download and install the software patch (Dx mode and RUO mode) on every affected instrument, including in each stand-alone instance of the off-instrument LRM for RUO mode on the Dx instruments, while connected to the internet.<\/li>\n<li>Contact techsupport@illumina.com for instructions about other ways to install the software patch, if you are not connected to the internet.<\/li>\n<li>Immediately contact techsupport@illumina.com if you suspect your instrument may have been compromised by an unauthorized user.<\/li>\n<\/ul>\n<p>For more information about Illumina&#8217;s cybersecurity vulnerability, see the Cybersecurity and Infrastructure Security Agency (CISA) published advisory, ICSA-22-153-02.<\/p>\n<h2>Background<\/h2>\n<p>On May 3, 2022, Illumina sent notifications to affected customers instructing them to check their instruments and medical devices for signs of potential exploitation of the vulnerability.<\/p>\n<p>Illumina has developed a software patch to protect against the exploitation of this vulnerability and is actively working to provide a permanent software fix for current and future instruments.<\/p>\n<p>At this time, the FDA and Illumina have not received any reports indicating this vulnerability has been exploited.<\/p>\n<h2>FDA Actions<\/h2>\n<p>The FDA is working with Illumina and coordinating with the CISA to identify, communicate, and prevent adverse events related to this cybersecurity vulnerability.  The FDA will continue to keep health care providers and laboratory personnel informed if new or additional information becomes available.<\/p>\n<h2>Reporting Problems to the FDA<\/h2>\n<p>The FDA encourages users to report any adverse events or suspected adverse events experienced with Illumina&#8217;s next generation sequencing instruments.<\/p>\n<h2>Contact Information<\/h2>\n<p>If you have questions about this letter, contact the Division of Industry and Consumer Education (DICE).<\/p>\n<\/p><\/div>\n<aside class=\"col-md-2 col-md-push-2\" role=\"complementary\">\n<section id=\"block-entityviewcontent-4\" data-block-plugin-id=\"entity_view:node\" class=\"block block-ctools block-entity-viewnode clearfix\">\n<div role=\"article\" about=\"\/medical-devices\/letters-health-care-providers\/illumina-cybersecurity-vulnerability-may-present-risks-patient-results-and-customer-networks-letter\" class=\"region region-\">\n<aside class=\"lcds-card lcds-card--border-top\" role=\"menu\">\n<ul class=\"lcds-description-list\">\n<div class=\"node-current-date\">\n<li class=\"lcds-description-list__item\">\n<div>\n<h2 class=\"lcds-description-list__item-heading\">Content current as of:<\/h2>\n<p class=\"lcds-description-list__item-text\"><time datetime=\"2022-06-02T00:00:00Z\">06\/02\/2022<\/time>\n<\/p>\n<\/p><\/div>\n<\/li>\n<\/div>\n<li class=\"lcds-description-list__item\">\n<\/li>\n<\/ul>\n<\/aside>\n<\/div>\n<\/section>\n<\/aside>\n<aside class=\"col-md-2 col-md-pull-10\" role=\"complementary\">\n<section id=\"block-entityviewcontent-3\" data-block-plugin-id=\"entity_view:node\" class=\"block block-ctools block-entity-viewnode clearfix\">\n<\/section>\n<\/aside><\/div>\n","protected":false},"excerpt":{"rendered":"<p>June 2, 2022 The US Food and Drug Administration (FDA) is informing laboratory personnel and health care providers about a cybersecurity vulnerability affecting software in the Illumina NextSeq 550Dx, the MiSeqDx, the NextSeq 500, NextSeq 550, MiSeq, iSeq, and MiniSeq, next generation sequencing instruments . These instruments are medical devices that may be specified either &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/harchi90.com\/illumina-cybersecurity-vulnerability-may-present-risks-for-patient-results-and-customer-networks-letter-to-health-care-providers\/\"> <span class=\"screen-reader-text\">Illumina Cybersecurity Vulnerability May Present Risks for Patient Results and Customer Networks: Letter to Health Care Providers<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[8],"tags":[],"jetpack_featured_media_url":"","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"fifu_image_url":"https:\/\/www.fda.gov\/themes\/custom\/preview\/img\/FDA-Social-Graphic.png","_links":{"self":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/35633"}],"collection":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/comments?post=35633"}],"version-history":[{"count":0,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/35633\/revisions"}],"wp:attachment":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/media?parent=35633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/categories?post=35633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/tags?post=35633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}