“Our investigation shows that an implantable
cardioverter defibrillator (1) is potentially susceptible
to malicious attacks that violate the privacy of
patient information and medical telemetry, and (2)
may experience malicious alteration to the integrity of
information or state, including patient data and therapy
settings for when and how shocks are administered