BD Recalls 62 BD MAX System IVD Units Worldwide Over Credential Breach (2025)
BD MAX System recall affects 62 units distributed worldwide in 2025 after unauthorized access to service credentials. An unauthorized actor accessed credentials used by BD technical support teams. Healthcare providers should stop using the devices and follow the manufacturer’s recall instructions.
Quick Facts at a Glance
Recall Date
September 23, 2025
Hazard Level
HIGH
Brand
BD
Category
Health & Personal Care
Sold At
Unknown
Geographic Scope
1 states
At-Risk Groups
GENERAL
Hazard Information
Product service credentials used by some BD technical support teams to access certain BD products were accessed by an unauthorized actor. Until these product service credentials are updated, there is a risk of unauthorized access that may impact the confidentiality, integrity and/or availability of the relevant products and associated data.
What You Should Do
Patients and healthcare providers should stop using this device immediately. Follow the recall instructions provided by the manufacturer. Contact Becton Dickinson & Co. or your healthcare provider for instructions. Notification method: Two or more of the following: Email, Fax, Letter, Press Release, Telephone, Visit
Get instant alerts for Health & Personal Care recalls
Be the first to know. Free instant alerts to your inbox.
No spamUnsubscribe anytime
About This Product
BD MAX System is an automated in vitro diagnostic platform used in laboratories for molecular testing. It is distributed worldwide to healthcare facilities. The recall concerns cybersecurity and credential management rather than a physical hardware defect.
Why This Is Dangerous
Unauthorized access to service credentials could enable unauthorized actors to access or modify BD products and related data, potentially impacting patient data and system availability.
Industry Context
This recall is not described as part of a broader industry cybersecurity pattern in the provided information.
Real-World Impact
Labs may halt testing operations to secure credentials, review data, and implement updated credentials. There could be workflow disruption and data-access concerns until remediation steps are completed.
Practical Guidance
How to identify if yours is affected
Identify if your facility uses BD MAX System units with catalog numbers 44191609 or 441927
Cross-check the UDI/DI 00382904419165 if available
Review recall notification for specific steps and contact BD through listed channels
Audit access credentials and review security logs for evidence of unauthorized access
Follow BD's instructions for credential updates and device remediation
Where to find product info
Recall notification channels include email, fax, letter, press release, telephone, or site visit from BD or healthcare provider
What timeline to expect
No specific remediation timeline is provided; recall is active with worldwide distribution
If the manufacturer is unresponsive
Document all contact attempts with BD
Escalate to facility leadership and pursue regulatory channels if necessary
Maintain records of communications and device identifiers
How to prevent similar issues
Strengthen credential management for service teams
Regularly update access credentials and revoke unused accounts
Enforce least-privilege access for device maintenance
Monitor security notifications and apply updates promptly
Educate staff on recognizing recall notices and escalation paths
Documentation advice
Keep the recall notice, device labels showing catalog numbers and UDI, correspondence with BD, and records of any remediation actions.
Product Details
Catalog Numbers: 44191609; 441927. UDI/DI: 00382904419165. Sold worldwide to healthcare facilities. Date sold: Unknown. Price: Unknown.
Reported Incidents
No injuries or incidents have been reported.
Key Facts
62 units recalled
Catalog Numbers 44191609 and 441927
Global distribution across many countries
Hazard: unauthorized access to service credentials
BD recalled 1,086 BD BACTEC Blood Culture System units worldwide after unauthorized access to product service credentials. The breach could compromise confidentiality, integrity and availability of affected devices and data. Hospitals and healthcare providers should stop using the device immediately and follow BD’s recall instructions.
BD recalled 177 units of the BACTEC Blood Culture System worldwide after an unauthorized actor accessed product service credentials. The breach could allow unauthorized access to system configurations and data. Healthcare facilities should stop using the affected equipment and follow BD’s recall instructions.
BD recalled 38 Veritor Connect Software units distributed to healthcare providers worldwide. Unauthorized access to product service credentials could affect confidentiality, integrity or availability of the product and data. Stop using the software and follow the recall instructions provided by the manufacturer.
BD recalled 4,283 Phoenix M50 Automated Microbiology Systems worldwide after unauthorized access to product service credentials. The unauthorized actor could access affected products and data. Labs should stop using these devices and follow the recall instructions from BD; contact BD for remediation guidance.
CareFusion 303 BD Alaris infusion pump modules and compatible infusion sets are recalled nationwide in the U.S. and multiple international markets. The recall covers reference numbers including C24101E and 10015414 and related SmartSite components. The defect may cause flow rate and bolus accuracy deviations, and incorrect occlusion timing. Stop using the device and follow recall instructions from