GE Healthcare Centricity PACS-IW (PACS-IW), Model Numbers: 1) 2042988-001; 2) 2049587-009; 3) 2049587-011; 4) 2049587-012; 5) 2049587-015; 6) 2049588-012 ; 7) 2052829-001.

There is a potential security vulnerability in Centricity Universal Viewer (UV), Centricity PACS-IW (PACS-IW), Centricity Radiology RA600 (RA600), & Centricity Cardiology CA1000 (CA1000) where the service login credentials are able to be identified which could allow a malicious actor with these credentials to access the system and potentially manipulate patient data.

GE Healthcare issued an URGENT MEDICAL DEVICE CORRECTION notice to its consignees on 02/19/2025 by letter delivered using traceable means. The notice explained the issue, safety issue, and requested the following actions be taken: "You can continue to use your device. Please ensure all potential users in your facility are made aware of this safety notification. Please ensure you have implemented the actions below: 1: Ensure your hospital network is secure and 2: Outside of the hospital network implement additional safeguards such as a VPN. Please retain this document for your records. Please complete and return the attached acknowledgement form to [email protected]." "If you have any questions or concerns regarding this notification, please contact GE HealthCare Service at 1-800-437-1171 or your local Service Representative." Per status report 05/23/2025, the firm send a follow-up notice dated 05/13/2025 providing an installation manual addendum that provides instructions for changing passwords.