Proof of concept attacks to control or disrupt Internet enabled medical devices has been publicly demonstrated, and the unintended consequences of malicious code released in the wild could include the death of patients. “That is probably the most likely scenario,” Ferguson said. But he does not rule out the possibility that devices could be intentionally targeted to kill someone.