IoMT defense: securing CardioMEMS EHR integration and wireless implantable data. Security Arsenal Team April 30, 2026 Kettering Health has recently advanced its cardiac care capabilities by integrating Abbott's CardioMEMS HF System directly into its Electronic Health Record (EHR) platform. This implantable wireless sensor monitors pulmonary artery pressure, transmitting critical data to guide clinical decisions for heart failure patients. While this integration promises significant improvements in patient outcomes and volume management, it represents a critical expansion of the Internet of Medical Things (IoMT) attack surface. For defenders, the integration of an implantable device with the central EHR creates a high-stakes cyber-physical convergence. Compromised data integrity or availability here is not merely a privacy breach; it directly impacts patient physiology and treatment protocols. Security teams must immediately understand the data flow and enforce strict segmentation to protect this telemetry from interception or manipulation. Technical analysis. The integration involves a complex chain of connectivity that moves data from inside the human body to the central clinical record. * Affected Products & Platforms: * Abbott CardioMEMS HF System: Implantable sensor and the Merlin(TM)@home Transmitter (patient bedside unit). * EHR Platform: (Implied Epic/Cerner/Meditech based on market share) acting as the central repository for PA pressure readings. * Network Infrastructure: Wi-Fi/Cellular gateways used by the transmitter to upload data to the vendor cloud (Merlin.net), which then pushes data to the hospital EHR via APIs. * Attack Surface & Vulnerability Exposure: * Data Integrity Risks: The primary concern is the manipulation of pressure readings. If an attacker intercepts the transmission between the Merlin transmitter, the vendor cloud, or the API ingress to the EHR, they could alter pressure values. Clinicians relying on this data for diuretic dosing could inadvertently induce hypovolemia or exacerbate heart failure. * EHR API Abuse: The integration relies on HL7 FHIR or proprietary APIs to ingest data. Unsecured API endpoints could be targeted for data exfiltration (PHI theft) or injection attacks. * Device Association Attacks: While the implant-to-transmitter link is proprietary and generally secure, the transmitter-to-cloud link traverses the public internet (often via standard broadband). This exposes the transmission to Man-in-the-Middle (MitM) attacks if the TLS tunneling is not rigorously validated or if the patient unit is compromised by malware. * Exploitation Status: Currently, there is no active zero-day exploit specific to CardioMEMS publicized in this context. However, IoMT devices are frequent targets for nation-state actors (e.g., Volt Typhoon) probing healthcare infrastructure. The risk here is "theoretical" but "imminent" due to the criticality of the data and the increasing connectivity of these systems. Executive takeaways. Given the architectural nature of this integration, specific IOC-based detection (Sigma/KQL) is not applicable without a specific threat signature. Instead, defensive focus must shift to configuration hygiene and architectural monitoring. * Rigorous API Segmentation and Authentication: Ensure that the API endpoint receiving CardioMEMS data into the EHR is not hosted on the general hospital LAN. It should reside in a dedicated DMZ or isolated VLAN with strict allow-listing for the vendor's IP ranges only. * Implement Ingest anomaly Monitoring: Configure the EHR or a middleware SIEM rule to alert on "impossible" physiologic data. For example, a sudden drop in pulmonary artery pressure to 0 mmHg or a massive spike inconsistent with the patient's trend could indicate a data feed hack or sensor failure. * Fourth Party Risk Management: The data flows through Abbott's Merlin.net cloud. Validate the vendor's SOC2 Type II reports and ensure Business Associate Agreements (BAA) explicitly cover data integrity, not just confidentiality. * Asset Discovery and Correlation: The CardioMEMS system introduces "grey assets" (the home transmitters) that touch your network. Ensure your asset inventory tracks these indirect connections and monitors for unauthorized devices attempting to masquerade as valid medical gateways. Remediation. To secure the CardioMEMS integration and similar IoMT workflows, healthcare security teams must implement the following controls: * Network Hardening: * Segmentation: Isolate the VLANs used for clinical workstations viewing this data from the general guest and administrative Wi-Fi. Ensure the server-side ingestion point is in a management DMZ. * Egress Filtering: Strictly control outbound traffic from clinical systems to prevent beaconing if a workstation accessing the data is compromised. * Data Integrity Controls: * Hash Verification: If the EHR integration supports it, ensure that incoming HL7/FHIR messages include digital signatures or checksums verified by the receiving interface engine to detect tampering in transit. * Access Control: * Role-Based Access Control (RBAC): Restrict access to the hemodynamics trends within the EHR to strictly the Cardiology and Heart Failure teams. Audit logs quarterly to ensure no "super-user" accounts are viewing patient data without clinical justification. * Vendor Coordination: * Request the specific TLS version and cipher suite configurations used by the Merlin@home transmitters. Ensure your network intrusion detection systems (NIDS) are tuned to allow and inspect, rather than block, these specific encrypted streams to avoid availability issues, while logging all handshake anomalies. Related resources. healthcare-cybersecurity hipaa-compliance healthcare-ransomware ehr-security medical-data-breach iomt abbott-cardiomems healthcare-it Is your security operations ready? Get a free SOC assessment or see how AlertMonitor cuts through alert noise with automated triage.

Kettering Health is building a new $25M health center in Xenia. Published April 9, 2026 at 11:30 AM EDT Kettering Health is building a new primary care center in Xenia. The construction project kicked off on April 7 with a groundbreaking. "We are expanding access to health care and this is part of Kettering Health's commitment to exceptional experiences in coordinated care in Greene County," said Paul Hoover, president of Soin Medical Center and Kettering Health Greene Memorial. The 24,000-square-foot health center will be located on Progress Drive across from the YMCA, at the Xenia REACH (Recreation, Education, Activity, Community, and Health) Center. "We have a great need for preventive care, for helping people stay well in the first place," said Dr. Ward F. Blair, executive medical director of primary care. "We are looking forward to the community being able to have one location where they can get almost all of their outpatient care needs taken care of." This $25 million investment is expected to open in the fall of 2027. Additionally, Kettering Health is investing $15 million in renovations at Greene Memorial Hospital. The health group is investing a total of $40 million into the Xenia community. The new health center will operate seven-days a week and feature family physicians, on-demand care, x-ray and lab services, as well as specialty providers including cardiologists, orthopedists, and gynecologists. A team of 60 will operate the center, including 20 physicians and advanced practice providers across primary and specialty care and 40 support staff members. According to Hoover, many of these employees will actually live in the community. "When we're in the community, we understand the health needs of folks who are here. We're engaged in civic boards and community activities," Hoover said. Xenia Mayor Ethan Reynolds said the addition of this center will be a great benefit to the community, including access to care and new job opportunities. "It's going to bring in more employees. If you look at it, we have YMCA, Walmart, new restaurants, everything is a major corridor for our city. This is where a lot of folks travel, come to go spend their money," Reynolds said. "We are the city of the future."