St. Jude Medical Recalls Merlin PCS 3650 Programmer for Firmware Update
St. Jude Medical is recalling 10,453 Merlin PCS 3650 programmers worldwide to install new firmware that mitigates the risk of unauthorized access to pacemakers.
What this means for you
Real risk of harm even if no illness or injury has been reported yet. Stop using the product and follow the agency's guidance.
Our severity reasoning: The recall addresses a security vulnerability (unauthorized access) in a medical device, which poses a risk of harm, but the source text does not report any actual injuries, illnesses, or deaths, fitting the criteria for a High severity score.
Plain-English summary
St. Jude Medical Inc. is recalling 10,453 units of the Merlin PCS 3650 Programmer with Model 3330 Software Version 23.1.1. These devices are portable, dedicated programming systems designed to interrogate, program, display data, and test St. Jude Medical implantable devices. The recall covers units distributed worldwide.
The recall is being conducted to install new pacemaker firmware. This update is intended to further mitigate the risk of unauthorized access to pacemakers that utilize radio frequency (RF) communications. The source text does not report any specific injuries, illnesses, or deaths associated with this recall.
Healthcare providers and consumers should contact St. Jude Medical Inc. for instructions on how to obtain the firmware update. The recall is classified as Class II by the U.S. Food and Drug Administration.
The recalled product
- Product
- Merlin PCS 3650 Programmer with Model 3330 Software Version 23.1.1 The Merlin Patient Care System (PCS) Model 3650 Programmer is a portable, dedicated programming system designed to interrogate program display data and test St. Jude Medical implantable devices.
- Manufacturer
- St Jude Medical Inc.
- Hazard
- Affected units
- 10,453
Is your product affected?
Check your packaging against the codes below. If any of them match, the product is part of this recall.
Lot numbers (1)
- Software version 23.1.1
Distribution
Distribution scope not specified by the agency.
Part of a larger recall action
This product is one of 10 recalled by St Jude Medical Inc. under a single FDA (Devices) recall action. The agency files each product separately, so the size of the action is not visible from this page alone.
See all 10 products in this recall →Related recalls
Same manufacturer · St Jude Medical Inc.
See all →- HighSt Jude Medical Recalls 15 Ellipse DR Cardioverter Defibrillators
FDA (Devices) · 2019-08-14
- SevereSt Jude Medical Recalls 42 Ellipse DR Cardioverter Defibrillators
FDA (Devices) · 2019-08-14
- SevereSt Jude Medical Recalls 27 Ellipse VR Implantable Cardioverter Defibrillators
FDA (Devices) · 2019-08-14
- SevereSt Jude Medical Recalls 21 Ellipse DR Implantable Cardioverter Defibrillators
FDA (Devices) · 2019-08-14
- SevereSt Jude Medical Recalls Ellipse VR Cardioverter Defibrillators Due to Electrical Failures
FDA (Devices) · 2019-08-14
Same hazard · unauthorized access
See all →- HighBiometric Firearm Safes Recalled Due to Unauthorized-Access Hazard
CPSC · 2026-07-09
- HighFirearm chamber locks recalled because they can be forcibly removed
CPSC · 2025-09-04
- HighMUSE 5 Cardiovascular Systems Recall Administrator Credential Access
FDA (Devices) · 2025-06-18
- SevereLifeShield Infusion Safety Software Recalled for Drug Library Defects
FDA (Devices) · 2025-05-21
- HighGE Healthcare Cardiology CA1000 Security Vulnerability Could Allow Patient Data Access
FDA (Devices) · 2025-04-09