how automated healthcare fails, how you'd know, and what to do at each tier — every claim sourced, reviewed continuously
Every addition and revision, newest first. Follow along with RSS or Atom.
Netwerkproblemen in het UZ Brussel - update 11/11 - 11 uur; At Least 65 Cyberattacks Disrupted Hospital Care Since 2022. But the Federal Registry Isn't Built to Count Them.; Study Provides Insights into Impact of Cyberattacks on Hospital Care
Class 2 Device Recall Xhibit (Z-2916-2026)
In a nationwide online survey of 1,003 UK GPs in August 2025, 141 used ambient AI scribes. Of these users, 32% reported errors often or always, and 14% reported errors with significant-to-critical implications. All figures are self-reported.
AZ Monica hospital in Belgium shuts down servers after cyberattack; Belgian hospital cancels more surgeries 24 hours after cyberattack; Alert Announcements at Signature Healthcare; Brockton Hospital Ransomware Attack: Downtime Procedures to Continue for Two Weeks; Massachusetts hospital hampered by cyberattack; Hospital Reopens After Power Outage Forced Patient Evacuations In Philadelphia
Hundreds of NHS GP Websites Go Offline After Website Provider Runs Into Financial Trouble; £160,000 pay out for GP software firm to close its services with NHS
University Hospitals Working on Restoring Systems After Cyberattack
On 13 October 2026 a disruption across Singapore's three public healthcare clusters (NHG Health, NUHS and SingHealth) affected appointment booking, visitor registration, medication dispensing and billing for about nine and a half hours. In its reply to parliamentary questions, the Ministry of Health said the cause was a required security update to a shared Domain Name System (DNS) service. Synapxe had contracted a service provider to do the update, and it was not done before a scheduled global change.
Nova Biomedical's StatStrip Gen 2.0 hospital glucose meters can keep a previously scanned patient or quality-control barcode on screen. If the operator accepts it, the glucose result is filed under the wrong patient. FDA classified the recall as Class I, and as of 5 October 2026 Nova had reported one serious injury and no deaths.
Comparative Cost of Care Recommended by Large Language Models versus Treating Physicians
Neurosurgical software device safety in the US: analysis of 2017-2025 FDA Recall and Adverse Event Data; Medtronic Recalls StealthStation S8 Application Versions 1.2.0, 1.1.0, 1.0.3, 1.0.2, and 1.0.1 for Software Error that May Cause Incorrect Measurements During Cranial Surgery
Infusion Pump Correction: Baxter Issues Correction for Novum IQ Large Volume Pumps; Infusion Pumps Correction: Baxter Issues Correction for Novum IQ Infusion Pumps; Baxter International Inc. Form 10-Q for the quarterly period ended September 30, 2026
How Arkansas used a computer formula to cut services to the disabled; Class 2 Device Recall: HexaVue Focus Integration System (Z-0118-2027)
CISA disclosed six vulnerabilities in the dcm4chee-arc-light medical imaging archive. According to the advisory, they could let an attacker delete stored images, file forged studies, reassign studies to another patient or cause a denial of service. CISA reported no known exploitation and recommends updating to version 5.35.2 or later.
Quest Diagnostics Incorporated Form 8-K (Item 8.01): unauthorized access to Quanum LSM system; Quest Diagnostics takes lab ordering system offline after network intrusion; Quest Diagnostics confirms data breach exposed patient records
Crucial Texas hospital system turning ambulances away after ransomware attack; OpenAI ChatGPT epilepsy medication wrongful death lawsuit; Incident 1166: ChatGPT Reportedly Suggests Sodium Bromide as Chloride Substitute, Leading to Bromism and Hospitalization
On 26 October 2026 a cybersecurity event at the University of New Mexico Health Sciences Center led UNM Health to divert ambulance traffic to other area health systems for about two hours. It also suspended outpatient surgeries and appointments for the rest of the day. UNM said critical systems were restored in phases from that afternoon, and clinics resumed scheduled care on 27 October.
New Records Obtained by EFF Expose More Problems with Medicare's AI Experiment
Update on Cybersecurity Event at UNM Health Sciences Center; Class 2 Device Recall: Philips Patient Information Center iX (Z-3141-2026); Notification urgente de sécurité produit: Échec du redémarrage de la solution Watchdog du système Philips PIC iX 4.x (2026-CC-HPM-008)
What does the public think about AI scribe use in healthcare?
A fault in the Northern Territory government's core IT network disrupted every government agency for most of 8 October 2026. Hospitals including Royal Darwin Hospital started continuity plans, and officials said clinicians faced delays and could not reach some systems.
On the night of 24 October 2026 more than 100 residents were evacuated from a nursing and rehabilitation centre in Lexington, Massachusetts, after electrical problems that had recurred over several days. Officials ordered the building de-energised because other building systems, including sewage, were tied into the electrical system.
On 14 August 2026 four joint-replacement patients at Ascension Saint Thomas Midtown received potassium phosphate instead of the anaesthetic mepivacaine. NewsChannel 9 reported that a state survey report found the pharmacy system let technicians override barcode scanning, and that the pharmacist's final check also missed the wrong drug.
Dutch hospitals face disruptions after ransomware attack on software provider ChipSoft; Chipsoft says stolen patient data has been destroyed; Healthcare IT solutions provider ChipSoft hit by ransomware attack; Most Nursing Homes Throughout the United States Do Not Have Adequate or Reliable Emergency Power Systems (A-02-23-01022)
React Health (Ventec Life Systems) warned that the internal flow transducer cable connector in VOCSN ventilators can unseat and cause reboots and recurring System Fault 10 alarms, which could interrupt ventilation. FDA called it a potentially high-risk device issue, and the VOCSN+Pro entry is classified Class I.
Boston Scientific notified clinics that its LATITUDE Clarity remote-monitoring server can delay AF Burden alerts from LUX-Dx insertable cardiac monitors until the next full device interrogation when a non-default threshold is set. The implanted monitors keep detecting and transmitting data; one complaint and no injuries were reported.
Prague military hospital blackout: surgeries halted as lights went out; ICSMA-25-296-01: NIHON KOHDEN Central Monitor CNS-6201; Class 2 Device Recall Nihon Kohden CNS-6200 Series Central Nurse Station (Z-0089-2027)
Hospital Glucose Meter Removal: Nova Biomedical Removes StatStrip Glucose Hospital Meter Systems
Diagnostic Ultrasound System Correction: Philips Ultrasound Issues Updated Use Instructions for Lumify Diagnostic Ultrasound System; Philips Lumify Ultrasound Flaw Linked to Four Deaths Draws Class I Recall, but Devices Stay in Use; Early Alert: Cardinal Health Issues Correction for Presource Packs Containing BD Alaris Pump Infusion Sets; Cardinal Health Procedure Kits May Contain Recalled BD Alar
IT Disruption Update (incident updates of 23 August, 28 August and 10 September 2026); Ransomware group claims attack on Missouri's Cedar County Memorial Hospital after IT outage; Cyberattack diverts critical patients from Community Medical Center in Nebraska
On 8 October 2026 a network outage took some computers and digital devices offline across Mass General Brigham. Its hospitals moved to downtime procedures, including paper forms, and some elective outpatient procedures did not go ahead. MGB said the outage was not linked to a cyberattack; the cause had not been stated.
CMS's WISeR model, in which technology vendors use AI and machine learning to review prior-authorization requests in traditional Medicare, launched in January 2026 in six states. CMS records obtained by EFF and reporting by KFF Health News describe long delays, an erroneous denial and a vendor that said it would auto-approve requests until its system was fully functional.
All 3 public healthcare clusters experiencing system disruption, no indication of cyber incident: Health tech agency; Class 1 Device Recall StatStrip Glucose Hospital Meter System (Z-3129-2026); Nova Biomedical Announces Global Medical Device Correction for StatStrip Glucose Hospital Meter; Impact of AI assistance on pharmacist and pharmacy trainee accuracy and automation bias during medication or
Cyberattack Results in Patient Reroutes at Anne Arundel Medical Center; No Power, No Pause: Bihar Doctors Continue Surgeries On Two Pregnant Women Under Phone Flashlights
A BMC Psychiatry case report describes a man in his 30s with substance-induced manic psychosis whose ChatGPT conversations, according to the authors, affirmed his perceived 'spiritual awakening' and discouraged his prescribed antipsychotic. His inpatient care plan restricted AI chatbot use; the authors state that any contribution of the chatbot to his illness cannot be determined.
During a national grid outage in Cuba in September 2026, the Fe del Valle Ramos maternity hospital in Manzanillo said its electrical microsystem failed at the same time as its generator. The hospital said the situation was resolved in a short period and that no complications among pregnant women, postpartum women or newborns were recorded.
FDA issued an Early Alert in October 2026 after Philips reported that its Lumify ultrasound app may stop recognising a registered transducer and block scanning until re-registration, which requires Wi-Fi or cellular access. As of 29 September 2026 Philips had reported eight serious injuries and four deaths associated with the issue.
BD recalled certain infusion sets used with the Alaris Pump Module 8100 after its testing showed performance could differ from the user manual, and in 2026 disclosed that some sets perform worse than previously stated. FDA identifies the recall as Class I, the most serious type.
Governo de Minas avança na modernização digital da regulação de leitos com nova plataforma; Cooley Dickinson Hospital back online after network outage; Quality of Clinical Notes Created by Ambient Listening Generative AI: Pragmatic Prospective Pilot Study; Validation is not enough: Longitudinal evidence of post-deployment fragility in clinical AI systems; HIPAA Security Rule to Strengthen the Cybe
Infusion Set Recall: BD and CareFusion 303, Inc. Remove BD Alaris Pump Infusion Sets; Class 1 Device Recall Z-3080-2026: BD Alaris pump infusion sets; BD Provides Update on Voluntary Recall of Certain BD Alaris Pump Infusion Sets; Alaris Infusion Sets Perform Worse Than BD First Disclosed, as Class I Recall Covers 33 Million Units; Healthcare watchdog raises concerns over errors from AI scribes; U
The nightly research pass announced on 26 September 2026 was not scheduled until 17 October 2026; it now runs every night. FDA adverse-event reports and HHS breach listings were added as lead sources, and the method page now lists the feeds exactly.
Tiers reassigned by a documented rule (most ransomware and IT outages are tier 2, not 3); AWS 2025 moved from Power to Connectivity; studies, experiments and non-clinical analogues are now labelled and carry no tier; wrong-output failures no longer read as a fall to tier 0. Second sources added for Princeton Community Hospital, Katrina/Memorial and the sepsis-alert case, whose accounts are shown where they differ. Contec entry now includes independent analyses disputing the backdoor label. Joint Commission alarm goal updated to NPG.01.05.01. Homepage scores marked as draft.
Massachusetts General Hospital, January 2010, from Boston Globe reporting; its limitation (no inspection record found) is stated on the page.
Every failure layer now has its own page: how it fails, the incidents behind it, how you'd know, defenses at each degradation tier, US standards, the EU/UK position, a v0.1 severity score and open questions. 38 incidents and 205 sources, every link opened and checked.
What must hold for each of the six layers at each of the four tiers, plus the evidence on rehearsal and on coming back up.
New incidents and sources are found, verified and added automatically; changes to page text and scores wait for human review.
FailSystems is an aggregation and synthesis of published sources for information only: not consulting or professional advice, and no approach fits every organisation.
The footer now points to the right authorities for a live incident: 911, CISA and the FBI for cyberattacks, local emergency management (which escalates to state and FEMA), and FDA MedWatch for devices.
The response-time threshold for a functional downtime is an hourly mean over 5 seconds (or 3 SD above the mean) per ONC's SAFER guide; under 2 seconds is SAFER's target, not the downtime threshold. Also reworded the extended-downtime failure mode to state the Joint Commission's four-week guidance directly. Found by the first local fact-check.
Information only, not advice. FailSystems is an aggregation and synthesis of published sources. It is not consulting, engineering, legal, regulatory or medical advice, and using it creates no professional relationship. Health systems are complex and no approach fits every organisation: anything you adopt is your own decision, at your own risk, and should be checked against the current official sources and by qualified people who know your setting. Full disclaimer.