CT, MRI & Fluoroscopy FDA Recalls: Siemens, Philips & GE Teardown
A safety teardown of CT, MRI, and fluoroscopy recalls. We review Siemens, Philips, and GE recall volumes, magnet venting risks, and cybersecurity issues.
CT, MRI & Fluoroscopy FDA Recalls: Siemens, Philips & GE Teardown
Diagnostic imaging systems—including Computed Tomography (CT) scanners, Magnetic Resonance Imaging (MRI) systems, and interventional fluoroscopy C-arms—are the technological backbones of modern medical centers. Because these capital-equipment systems operate with high mechanical forces, extreme magnetic fields, ionizing radiation, and complex networking software, any system failure carries significant patient and operator risk.
For clinical engineers, Healthcare Technology Management (HTM) professional staff, and regulatory intelligence specialists, staying abreast of safety trends across these systems is a core duty. This article details a post-market safety teardown of the "Big Three" imaging OEMs—Siemens Healthineers, Philips Healthcare, and GE Healthcare. We leverage local extractions of the FDA's recalls and MAUDE databases to map the failure landscapes of radiology capital equipment.
Scenario Question & Direct Answer
Question: Which CT, MRI, and fluoroscopy recalls and MAUDE failures actually matter across Siemens, Philips, and GE—what failed, how many units/events, and what class?
Direct Answer: Capital imaging recalls cluster around three failure modes: magnet/quench safety (Siemens Magnetom 3T MRI, FDA Class I, Aug 2025—ice-blocked venting can rupture the helium vessel on quench, risking asphyxiation/trauma/death), cybersecurity (GE Revolution CT AW Server, FDA Class II, Mar 2026), and recurring hardware/software corrections (Philips MR/CT). The openFDA recall database holds 2,222 imaging recall rows dominated by the Big-Three OEMs (Siemens, Philips, GE); MAUDE logged 8,632 imaging device-rows in 2024, led by interventional fluoroscopy (7,946 events).
Major Imaging Recalls (2024–2026) and What Failed
Recalls for medical imaging systems frequently represent massive operational hurdles for hospitals, requiring site visits by field service engineers and temporary room closures.
Below is a breakdown of the three key recall events that define the 2024–2026 capital imaging safety landscape:
| OEM Manufacturer | Affected Imaging System | FDA Recall Class | Primary Failure Mode | Regulatory & Clinical Consequences |
|---|---|---|---|---|
| Siemens Healthineers | 3 Tesla Magnetom MRI Systems (9 Models) | Class I (Classified Aug 2025) | Ice-blocked magnet venting system prevents gas escape during a quench. | Overpressure can cause helium-vessel rupture and structural explosion; risks cold burns, asphyxiation, trauma, and death. Affects hundreds of units globally. |
| GE HealthCare | Revolution CT, Apex, and Ascend Systems | Class II (Initiated Mar 2026) | Software vulnerability in the AW Server / Edison Health Link. | Unauthorized access could expose patient data or allow network manipulation of the server. Managed through software patches. |
| Philips Healthcare | Various MRI and CT Systems | Class II (Recurring Corrections) | Diverse software bugs and mechanical alignment defects. | Voluntary field corrections to update reconstruction software or reinforce gantry covers, avoiding minor safety hazards. |
Deep-Dive: Cryogenic Quench Thermodynamics & Siemens 3T Venting Failures
The Siemens Healthineers Class I correction for 3 Tesla (3T) Magnetom systems represents a critical intersection of mechanical engineering, cryogenics, and facility design.
The Physics of an MRI Quench
MRI scanners utilize superconducting electromagnets. To achieve superconductivity, the niobium-titanium (NbTi) wire coils must be cooled below their transition temperature using liquid helium, maintaining a temperature of 4.2 Kelvin (-268.95°C).
At this temperature, electrical resistance drops to zero, allowing thousands of amperes of electrical current to circulate indefinitely without a power source, creating a strong static magnetic field ($B_0$, typically 1.5T or 3.0T).
A quench occurs when a small portion of the magnet coil transitions from the superconducting state to a resistive state. This can be triggered by:
- Localized heating (mechanical friction, epoxy cracking).
- A breakdown of the vacuum insulation in the cryostat.
- Manual activation of the emergency run-down button (e.g., if a magnetic projectile pins a patient against the scanner).
Once resistance is introduced, the high current rapidly heats the resistive region. This thermal energy boils the surrounding liquid helium. Liquid helium expands by a factor of 740 as it transitions into gas. A standard 3T scanner contains approximately 1,500 to 2,000 liters of liquid helium, which translates to over 1.1 million liters of gaseous helium that must be evacuated within seconds.
Superconducting State (4.2K) --[Transition to Resistive State]--> Rapid Resistive Heating
Liquid Helium (2,000L) --[Phase Change: 740x Expansion]--> Gaseous Helium (1,100,000L)
Normal Escape: Quench Pipe --> Out of Building
Blocked Escape: Cryostat Pressure Spike --> Cryostat Rupture / Explosion
The Ice Blockage Failure Mode
To handle this massive expansion, the MRI cryostat is equipped with a thin burst disc designed to rupture at a specific pressure (typically 15–20 psi), directing the gas into a quench pipe leading out of the facility.
In the recalled Siemens Magnetom 3T systems, condensation and humidity accumulated in the upper sections of the quench pipe. Because the pipe is physically close to the cryogenic cryostat, this moisture froze, forming a solid ice plug.
- The Hazard: During a quench, the burst disc ruptures, but the gas encounters the ice plug. The liquid helium continues to boil, and because it cannot escape, pressure within the cryostat spikes exponentially.
- The Consequence: The structural integrity of the vacuum vessel is compromised. The vessel can rupture catastrophically, discharging high-velocity metal shrapnel and releasing freezing helium gas directly into the scan room. Helium displaces oxygen, leading to rapid asphyxiation of any occupants, while the cryogenic temperatures cause instant cold burns and severe freeze injuries.
The Siemens recall affected 9 scanner configurations (MAGNETOM Vida, Skyra, Prisma, Verio, and Biograph mMR, among others) and required immediate installation of modified vent path designs, heaters, and pressure monitoring accessories.
Facility Engineering Guidelines: Quench Pipe Inspections
For hospital facility managers and clinical engineers, maintaining quench vent integrity is a high-liability task. The Siemens recall highlighted the necessity of strict, preventative design and maintenance standards:
- Condensation Control: Quench pipes must be insulated along their entire run, especially where they traverse unconditioned ceiling voids or exit the building envelope. This prevents internal frost buildup.
- Weep Hole Verification: Every quench pipe run must incorporate a drainage system or "weep hole" at its lowest vertical point to allow accumulated water to escape before it can freeze. These weep holes must be checked monthly to prevent blockages.
- Discharge Routing Safety: The outdoor exit point of the quench pipe must be positioned away from pedestrian walkways, fresh air intakes, and electrical equipment. Helium discharging at high velocity and cryogenic temperatures represents a severe localized hazard.
- Thermal Barriers and Expansion Joints: Ensure that the connection between the MRI cryostat and the building's quench piping utilizing a flexible stainless-steel bellows (expansion joint) to isolate mechanical stress during a quench, which can cause significant pipe deflection.
Deep-Dive: GE AW Server Cybersecurity Vulnerabilities
The GE HealthCare Class II recall of the Advantage Workstation (AW) Server represents a critical software-level risk in digital radiology.
Software Integration and Attack Vectors
The GE AW Server is an image processing system that reconstructs raw slice data from CT scanners (such as the Revolution Apex, Revolution Ascend, and Revolution CT) into 3D volume renderings used for surgical planning. The server connects to the scanner gantry via a high-speed local network and is linked to the hospital's PACS (Picture Archiving and Communication System).
The vulnerability resided within the Edison Health Link software platform, which manages the CT Smart Subscription framework. The platform had an open access port and a privilege escalation vulnerability that allowed:
- Unauthorized Access: An attacker on the hospital LAN could connect to the server without entering valid credentials.
- Arbitrary Code Execution: The attacker could execute commands at the system level, potentially modifying reconstruction algorithms, introducing image artifacts, or altering patient PACS metadata.
- Lateral Network Expansion: Because the server is trusted by other systems in the hospital, it could be used as a beachhead to launch attacks on the PACS database or EHR (Electronic Health Record) servers.
Although no patient injuries or cyberattacks were reported from this vulnerability, the FDA classified it as a Class II recall. GE's correction deactivates AW Server authentication through the CT system on the EHL-based Smart Subscription as an interim step and later installs a CT software update, and the company instructs customers to follow cybersecurity best practices (isolated internal networks, strong passwords) in the meantime. For more information on medical device cyber regulations, see our guide on medical device cyber incident reporting (CIRCIA).
PACS and DICOM Integration Vulnerabilities
Beyond server-level OS vulnerabilities, diagnostic imaging safety is increasingly impacted by communication protocol weaknesses:
- DICOM Protocol Weaknesses: The Digital Imaging and Communications in Medicine (DICOM) standard, which dictates how imaging data is formatted and transmitted, was designed before modern network security architectures. By default, DICOM traffic is often unencrypted and lacks built-in authentication mechanisms.
- Man-in-the-Middle (MitM) Alterations: Research has shown that attackers can intercept DICOM traffic in transit. Utilizing generative neural networks, an attacker could theoretically inject or remove simulated nodules (e.g., lung tumors) from raw CT slice data before it reaches the AW Server or PACS, directly compromising diagnostic integrity.
- Consoles as Entry Points: Radiology acquisition consoles run on standard Windows or Linux kernels. If an operator accesses the internet or plugs an unauthorized USB drive into the console to extract patient scans, they risk introducing malware that can propagate to the reconstruction pipeline.
The Engineering of Interventional Fluoroscopy C-Arm Failures
While CT and MRI systems face software and cryogenic hazards, interventional fluoroscopy C-arms (product code OWB) suffer from mechanical and real-time operational vulnerabilities. A C-arm is a motorized, cantilevered gantry that rotates around the patient to provide continuous, real-time X-ray visualization during catheterization or surgical procedures.
Common failure modes in OWB devices include:
- Motorized Joint Drift: The heavy C-arm (often weighing between 300 and 500 kg) relies on electromagnetic brakes to lock its position. Component wear or software command errors can cause the arm to drift, posing a risk of collision with the patient or surgical table.
- Slip Ring and Cable Wear: Continuous rotation twists internal power and fiber-optic communication cables. Over time, physical stress leads to intermittent communication loss, causing the display monitor to freeze mid-procedure.
- Collision Sensor Failure: C-arms incorporate pressure-sensitive collision bumpers. If a bumper fails, the system may fail to stop when contacting the patient or table, potentially causing physical crush injuries.
- Radiation Dosage Calibrations: Software glitches in the automatic brightness control (ABC) can lead to unexpected spikes in tube current, exposing the patient and surgical team to higher radiation doses than intended.
Because interventional systems are active during critical phases of surgery, mechanical or software failures cannot be easily ignored, explaining their dominance in the MAUDE adverse event reports.
Modality and OEM Recall Concentration
To put these individual recalls in context, we analyzed the openFDA recalls database for diagnostic imaging systems. Filtering across key product codes:
- JAK: System, X-Ray, Tomography, Computed (CT)
- LNH: System, Nuclear Magnetic Resonance Imaging (MRI)
- OWB: Interventional Fluoroscopic X-Ray System
- OXO: Image-Intensified Fluoroscopic X-Ray System, Mobile
- RCC: System, X-Ray, Fluoroscopic, Image-Intensified (C-Arm)
We identified 2,222 total recall records in the database.
Modality Split
The breakdown by modality indicates where regulatory corrections are most frequent:
- Computed Tomography (JAK): 857 recalls (38.6%)
- Nuclear Magnetic Resonance (LNH): 699 recalls (31.5%)
- Interventional Fluoroscopy (OWB): 616 recalls (27.7%)
- Mobile/Other Fluoroscopy (OXO/RCC): 50 recalls (2.2%)
OEM Recall Volume Concentration
The recalls database demonstrates high manufacturer concentration. Below are the top recalling firms in our radiology dataset:
| Recalling Manufacturer Entity | Count of Recalls | Primary Focus Areas | Typical Recall Class |
|---|---|---|---|
| Siemens Medical Solutions USA, Inc. | 433 | MRI, CT, and Interventional Systems | Class II (with rare Class I) |
| Philips Medical Systems (Cleveland) Inc. | 286 | CT and MR Systems | Class II |
| GE Healthcare, LLC | 205 | CT, MRI, and C-Arms | Class II |
| Philips North America LLC | 202 | Imaging software and PACS | Class II |
| PHILIPS MEDICAL SYSTEMS NEDERLAND B.V. | 153 | Angiography and X-ray systems | Class II |
| GE Medical Systems, LLC | 120 | Computed Tomography | Class II |
| Toshiba/Canon Medical Systems Inc. | 52 | Tomography and Ultrasound | Class II |
MAUDE Adverse Event Analysis for Radiology Systems
Our query of the 2024 MAUDE dataset for the diagnostic imaging product codes (JAK, LNH, OWB, OXO) returned 8,632 device-rows of adverse event reports.
Modality Split
The distribution of reports is highly uneven:
- Interventional Fluoroscopy (OWB): 7,946 reports (92.05%)
- MRI Systems (LNH): 281 reports (3.26%)
- CT Scanners (JAK): 212 reports (2.46%)
- Mobile Fluoroscopy (OXO): 193 reports (2.23%)
Why Fluoroscopy Dominates MAUDE Counts
The overwhelming concentration of reports in interventional fluoroscopy (OWB) (over 7,900 reports) represents a significant data-driven insight. This is driven by several factors:
- Procedure Length and Real-Time Use: Unlike a CT or MRI scan, which takes minutes and is performed on a stable patient, interventional fluoroscopy is used continuously for hours during live, high-risk surgical procedures (e.g., cardiac catheterization, neurovascular aneurysm coiling).
- Mechanical Complexity: Fluoroscopy C-arms undergo continuous mechanical rotation, positioning changes, and table movements. Mechanical issues like motor jams, table drift, and collision sensor failures are frequent.
- Immediate Clinical Disruption: If a CT scanner software freezes, the technician simply reboots it and reschedules the patient. If a fluoroscopy system freezes during a coronary angioplasty, the clinical team has an immediate emergency (cannot visualize the catheter location). This requires an immediate transition to alternative imaging or emergency open surgery, which mandates a formal MAUDE filing.
Event Type Split
Across all 8,632 reports, the event types are classified as:
- Malfunctions: 8,324 reports (96.43%)
- Injuries: 286 reports (3.31%)
- Deaths: 11 reports (0.13%)
- Other/No Answer: 11 reports (0.13%)
Of the 11 reported deaths in 2024, the majority occurred during interventional procedures where a fluoroscopy C-arm failed or lost power mid-procedure, requiring patient transfer or emergency intervention.
Action Plan for HTM and Radiology Teams
Hospital biomedical and radiology departments should implement the following protocols to manage capital imaging recalls:
Step 1: Quench Vent Facility Audits
- Inspect Quench Pipe Insulating Shells: Check that the cellular glass or elastomeric pipe insulation is fully intact without gaps, preventing warm humid air from causing localized condensation inside the vent run.
- Verify Weep Hole Functionality: Inspect the bottom-most drainage weep hole using a wire probe. Ensure that liquid condensation has a clear exit path and does not pool in the horizontal run near the cryostat interface.
- Inspect Discharge Hood and Screen: Verify that the outdoor discharge terminal is fitted with a coarse, non-corrosive mesh screen to prevent birds or small animals from nesting inside the duct.
- Perform Thermographic Inspections: Use an infrared camera along the quench duct path while the MRI is in operation to detect thermal bridging that might indicate abnormal cold transfer, suggesting condensation/ice formation risks.
- Document Heater Collar Power Supplies: Ensure that Siemens Magnetom heating jackets are connected to the facility’s emergency backup generator power circuit to ensure functionality during a main power failure.
Step 2: Cybersecurity & Segmentation
- Implement Strict VLAN Segmentation: CT and MRI servers (like the GE AW Server) must be placed on isolated, non-routable VLANs with no direct exposure to the public internet or external hospital traffic.
- Restrict DICOM Access Control Lists (ACLs): Configure host firewalls on consoles and reconstruction nodes to accept DICOM incoming traffic only from specified PACS gateways and trusted modalities.
- Enforce Console Endpoint Security: Disable all USB mass storage access in registry policies on acquisition consoles. Mandate user authentication for any service or diagnostic shell access.
- Conduct Annual Vulnerability Scanning: Scan imaging servers during scheduled downtime for unpatched CVEs, outdated kernels, and default credential vulnerabilities.
Step 3: Cath Lab and Hybrid OR Contingency Planning
- Perform Emergency Brake Release Training: Ensure that all cath lab and interventional OR staff undergo annual hands-on training on how to physically activate the manual gantry release lever in a total power loss scenario.
- Verify UPS Backup Power Autonomy: Test facility UPS batteries under load semi-annually. Ensure that the hybrid OR C-arms have sufficient reserve power to execute a safe retraction and gantry parking cycle.
- Establish Backup Visualizers: Ensure that hybrid ORs are equipped with secondary portable ultrasound units or mobile C-arms to provide emergency imaging fallback if the main interventional gantry fails mid-procedure.
Future of Radiology Device Safety (2027 and Beyond)
The medical imaging industry is transitioning toward predictive and automated safety mechanisms:
- IoT-Enabled Cryogenic Monitoring: OEMs are introducing cloud-connected sensors that track cryostat pressure and humidity in the quench pipe in real time. These sensors leverage machine learning to flag potential ice blockage conditions before a quench occurs.
- AI-Driven Predictive Maintenance: Modern CT scanners utilize gantry vibration sensors and tube temperature telemetry to predict mechanical and tube failures days before they occur, scheduling preventative field service during off-hours to reduce unscheduled clinical downtime.
- Zero-Boil-Off (ZBO) Magnet Innovations: Newer magnet designs seek to utilize sealed, helium-free or ultra-low helium technology (requiring only a few liters of helium rather than thousands). These systems completely eliminate the risk of a high-pressure quench, simplifying facility design and eliminating the need for complex quench venting pipes.
For further reading on managing retired or aging radiology assets, see our guide on end-of-service ultrasound fleet risks and ultrasound probe repair vs replace MAUDE decision frameworks.
Frequently Asked Questions (FAQs)
Is the Siemens MRI recall a Class I recall?
Yes, the FDA classified the Siemens Healthineers 3T Magnetom MRI recall (initiated due to magnet venting ice blockage) as a Class I recall in August 2025.
Why was the GE HealthCare CT system recalled?
Certain GE Revolution CT, Apex, and Ascend systems were recalled due to a security vulnerability in the AW Server when integrated with the Edison Health Link, which could allow unauthorized network access. The FDA classified this as a Class II recall.
What FDA product codes cover CT, MRI, and fluoroscopy systems?
The primary codes are JAK for Computed Tomography (CT) systems, LNH for Magnetic Resonance Imaging (MRI) systems, and OWB for Interventional Fluoroscopy systems.
What is an MRI quench?
An MRI quench is the sudden loss of superconductivity in the magnet coils, causing rapid heating that boils the liquid helium coolant, turning it into a massive volume of expanding gas that must be vented out of the building.
How often should a hospital inspect its MRI quench venting system?
Hospitals should perform a visual inspection of the outdoor discharge point and verify the drainage of weep holes monthly, with a comprehensive physical and pressure inspection conducted annually by qualified service personnel.
What is the DICOM standard?
DICOM (Digital Imaging and Communications in Medicine) is the global IT standard for handling, storing, printing, and transmitting information in medical imaging, ensuring interoperability between consoles, servers, and PACS databases.
How does a gantry alignment error affect CT scans?
A gantry alignment error can introduce spatial distortion artifacts in the reconstructed slice images, potentially leading to mismeasurements of anatomical structures or tumors.