{"guid":"9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","title":"500.000 Recalled Pacemakers, 2 Billion $ Stock Value Loss","subtitle":"The Story Behind","slug":"Camp2019-10288-500_000_recalled_pacemakers_2_billion_stock_value_loss","link":"https://fahrplan.events.ccc.de/camp/2019/Fahrplan/events/10288.html","description":"During an independent security assessment of several pacemaker vendors multiple lethal and highly critical vulnerabilities were found. Based on previous experience with one specific vendor a new way of monetising vulnerabilities has been chosen. After going public a huge discussion on vulnerability disclosure ethics and responsibilities began. The stock value of the affected vendor dropped by 2 billion dollar just in one single day. The security researchers got discredited and a huge lawsuit was started. After a year of mutual accusations and denial more than 500.000 pacemakers got recalled. This talk will provide insights into pacemaker security and share first-hand experience gathered during this project. A special focus will also be on ethical vulnerability disclosure and lessons learned for future security research.","original_language":"eng","persons":["Tobias Zillner "],"tags":["camp19","10288","Security"],"view_count":627,"promoted":false,"date":"2019-08-22T00:00:00.000+02:00","release_date":"2019-08-23T02:00:00.000+02:00","updated_at":"2026-04-14T22:30:07.200+02:00","length":2666,"duration":2666,"thumb_url":"https://static.media.ccc.de/media/conferences/camp2019/10288-hd.jpg","poster_url":"https://static.media.ccc.de/media/conferences/camp2019/10288-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/camp2019/10288-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/camp2019/10288-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/Camp2019-10288-500_000_recalled_pacemakers_2_billion_stock_value_loss","url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_title":"Chaos Communication Camp 2019","conference_url":"https://api.media.ccc.de/public/conferences/camp2019","related":[{"event_id":7362,"event_guid":"97576344-49ba-4fd0-a2e5-9af7923fbffb","weight":27},{"event_id":7368,"event_guid":"e1b56229-fb1e-480c-9691-c137ec11ee51","weight":30},{"event_id":7374,"event_guid":"4965ee72-6d7b-4e68-85f7-4d6c4f0c9041","weight":37},{"event_id":7381,"event_guid":"e988c76b-3a47-46de-a2c7-77c49a5e731b","weight":33},{"event_id":7383,"event_guid":"acc3dd01-bec3-444f-80c1-5dd37f522aa4","weight":26},{"event_id":7384,"event_guid":"8e743367-04a1-4232-ab03-a54fc210e548","weight":45},{"event_id":7385,"event_guid":"df91b683-2f32-4400-8043-b1d88aa0b454","weight":29},{"event_id":7389,"event_guid":"ed4b6c75-14f4-49fe-a11e-3762bd6b54e3","weight":32},{"event_id":7395,"event_guid":"95a8ea24-a2dd-479f-86fd-6e96ce66a47e","weight":25},{"event_id":7397,"event_guid":"f650773d-d9df-4050-814c-a9505c439b30","weight":29}],"recordings":[{"size":212,"length":2666,"mime_type":"video/mp4","language":"eng","filename":"camp19-10288-eng-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-23T02:45:16.795+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-hd/camp19-10288-eng-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss.mp4","url":"https://api.media.ccc.de/public/recordings/37359","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":212,"length":2666,"mime_type":"video/mp4","language":"deu","filename":"camp19-10288-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-23T02:45:25.076+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-hd/camp19-10288-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss.mp4","url":"https://api.media.ccc.de/public/recordings/37360","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":350,"length":2666,"mime_type":"video/mp4","language":"eng-deu","filename":"camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-23T02:45:35.753+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-hd/camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_hd.mp4","url":"https://api.media.ccc.de/public/recordings/37361","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":40,"length":2655,"mime_type":"audio/mpeg","language":"eng","filename":"camp19-10288-eng-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2019-08-23T02:47:05.243+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/mp3/camp19-10288-eng-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/37365","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":28,"length":2655,"mime_type":"audio/opus","language":"eng","filename":"camp19-10288-eng-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2019-08-23T02:47:46.645+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/opus/camp19-10288-eng-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_opus.opus","url":"https://api.media.ccc.de/public/recordings/37367","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":142,"length":2666,"mime_type":"video/mp4","language":"eng-deu","filename":"camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-08-23T02:55:46.964+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-sd/camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_sd.mp4","url":"https://api.media.ccc.de/public/recordings/37371","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":171,"length":2666,"mime_type":"video/webm","language":"eng-deu","filename":"camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-08-23T03:11:08.647+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/webm-sd/camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/37385","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":449,"length":2666,"mime_type":"video/webm","language":"eng-deu","filename":"camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-23T03:30:55.089+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/webm-hd/camp19-10288-eng-deu-500000_Recalled_Pacemakers_2_Billion_Stock_Value_Loss_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/37391","event_url":"https://api.media.ccc.de/public/events/9b7f0485-2ff1-4302-b1b7-98cbc8b502f4","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"}]}