Sen. Cotton Warns of Chinese Medical Device Cyber Threats
Senator Tom Cotton warned that Chinese-manufactured networked medical devices like the Contec CMS8000 pose cybersecurity risks by automatically extracting patient data and allowing unauthorized remote access.
The Arkansas Republican addressed his concerns in a letter sent Tuesday to Kyle Diamantas, Acting Commissioner of the U.S. Food and Drug Administration, highlighting vulnerabilities in medical monitoring equipment produced in China that could expose sensitive patient information to malicious actors.
Breitbart News reports that Cotton specifically cited issues discovered by the FDA and the Cybersecurity and Infrastructure Security Agency regarding the Contec CMS8000, a patient monitoring device made in China and used in American healthcare facilities.
Automatic Data Extraction and Remote Access Vulnerabilities
Federal regulators determined that the Chinese-made device would automatically harvest personally identifiable patient health information whenever it connected to the internet. Such unauthorized data extraction creates pathways for identity theft, insurance fraud, extortion schemes, and other criminal activities targeting American patients, Cotton warned.
CISA issued an additional warning that the device contained programming allowing unverified users to remotely control it without healthcare providers’ knowledge or consent. This backdoor access could enable hostile Chinese operatives to manipulate device operations and alter displayed data, potentially resulting in dangerous misdiagnoses of serious conditions including heart failure, cardiac arrhythmias, and hypertension.
The FDA issued a Class II recall of the Contec CMS8000 on May 14, 2025, in response to these security threats.
Regulatory Gap Leaves Older Devices Unprotected
Cotton noted that while the FDA began requiring medical device manufacturers to demonstrate enhanced cybersecurity protections for pre-market clearance in 2023, this requirement does not apply retroactively to devices already in use before that date. This regulatory gap leaves countless American patients vulnerable to compromised equipment already deployed in healthcare settings.
The senator has requested that the FDA and CISA conduct a comprehensive review of all Chinese-manufactured medical devices that received clearance prior to March 2023.
Cotton emphasized in his correspondence that safeguarding Americans’ privacy and preventing adversarial nations from accessing health data represents a matter of paramount importance, expressing his commitment to working with federal agencies on addressing these vulnerabilities.
With information from Breitbart News
