500.000 Recalled Pacemakers, 2 Billion $ Stock Value Loss
Channel: media.ccc.de
Date: 2019-08-23

https://media.ccc.de/v/Camp2019-10288-500_000_recalled_pacemakers_2_billion_stock_value_loss

The Story Behind

During an independent security assessment of several pacemaker vendors multiple lethal and highly critical vulnerabilities were found. Based on previous experience with one specific vendor a new way of monetising vulnerabilities has been chosen. After going public a huge discussion on vulnerability disclosure ethics and responsibilities began. The stock value of the affected vendor dropped by 2 billion dollar just in one single day. The security researchers got discredited and a huge lawsuit was started. After a year of mutual accusations and denial more than 500.000 pacemakers got recalled. This talk will provide insights into pacemaker security and share first-hand experience gathered during this project. A special focus will also be on ethical vulnerability disclosure and lessons learned for future security research.



Tobias Zillner 

https://fahrplan.events.ccc.de/camp/2019/Fahrplan/events/10288.html