LIVE FEED

A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.

Manufacturers // Fresenius Medical Care

Fresenius Medical Care

Fresenius Medical Care in MedDevice Cyber coverage: 4 stories, 1 product named, 3 CVEs, and the company's own disclosures.

Public disclosure program

Follow Fresenius Medical Care Claim this page

Stories: 4
Products named: 1
Product CVEs: 3
Responses on record: 0
Latest story: Sep 22, 2026

Coverage

4 stories

ShinyHunters claims a Fresenius Medical Care breach; company confirms limited internal access

Fresenius Medical Care confirmed unauthorized access to a limited number of internal systems on September 22, hours after the extortion group ShinyHunters listed the dialysis and device maker as a victim.

Fresenius Medical CareSep 223 min read

Fresenius says Fresenius Medical Care 5008, 6008 and BCM are not affected by Access:7 Axeda flaws

Fresenius's June 29, 2022 Access:7 statement lists Fresenius Medical Care's 5008, 5008s, 6008, Silencia, SleepSafe Harmony and BCM as not affected by the Axeda flaws CVE-2022-25246 to CVE-2022-25252 (ICSA-22-067-01).

FreseniusJun 292 min read

Fresenius Medical Care DataCOM Gateways with ESF 6.x affected by Log4j flaws

The Fresenius group Log4j statement lists Fresenius Medical Care IDMS, Home Bridge and Remote Service DataCOM Gateways with ESF Version 6.x as affected by CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105.

Fresenius Medical CareDec 212 min read

Fresenius says Fresenius Kabi pumps and the 4008S do not use the Treck stack behind Ripple20

Fresenius's July 6, 2020 Ripple20 statement (ICSA-20-168-01, CVE-2020-11896 to CVE-2020-11914) lists Fresenius Kabi pumps and Conox, plus the Fresenius Medical Care 4008S and UniDataLink, as not affected.

FreseniusJul 63 min read

Products in our coverage

DataCOM Gateway ESF Version 6.x (IDMS, Home Bridge, Remote Service) dialysis data gateway

CVEs in coverage of Fresenius Medical Care products

CVE-2021-44228 CVE-2021-45046 CVE-2021-45105

← All manufacturers