External Defibrillator & AED Recalls: ZOLL, Stryker, Philips & Cardiac Science Teardown

Resuscitation devices represent one of the most critical sectors in medical technology. Unlike devices that operate in controlled clinical environments under continuous professional observation, automated external defibrillators (AEDs) are frequently deployed in public settings—schools, airports, corporate offices, and police vehicles—where they must function instantly and flawlessly when operated by lay responders. A single failure during a sudden cardiac arrest (SCA) event is almost always fatal, as every minute of delay in shock delivery decreases the chance of survival by 7 to 10 percent.

For clinical engineers, emergency medical services (EMS) directors, and school or facility safety managers, monitoring the safety records and recalls of their AED fleets is a critical public safety responsibility. This deep dive provides a manufacturer-spanning post-market surveillance analysis of external defibrillator and AED recalls from the FDA and adverse-event reports from the Manufacturer and User Facility Device Experience (MAUDE) database.

---

Executive Summary: Resuscitation Device Safety

• Recall Volume & Manufacturer Distribution: The FDA records 373 device recalls across the non-implantable external defibrillator and AED product-code set. The recall record is concentrated among a handful of market leaders, led by Philips (112 recalls across name entities), Physio-Control / Stryker (75 recalls), and Cardiac Science (46 recalls).
• MAUDE Signal Volume: Resuscitation devices generate a massive safety footprint in the MAUDE database.
  • In 2024, MAUDE recorded 27,951 reports associated with external defibrillators and AEDs, including 23,916 malfunctions, 3,584 injuries, and 450 deaths.
  • In 2025, MAUDE recorded 26,411 reports, including 22,184 malfunctions, 3,813 injuries, and 412 deaths.
• ZOLL Dominance in MAUDE: ZOLL Manufacturing Corporation and ZOLL Medical Corporation account for the largest share of adverse events in MAUDE, totaling over 16,000 reports annually (2024: 12,370 under ZOLL Manufacturing; 4,247 under ZOLL Medical).
• Primary Failure Modes: While battery degradation and electrode pad dry-out remain common operational problems, the leading root causes of official product recalls are Nonconforming Material/Component (68 recalls), Process Control (62 recalls), and Device Design (59 recalls).
• Key Event Anchors:
  • Philips HeartStart Resistor Failure: The largest historical recall involved approximately 700,000 Philips HeartStart FRx and HS1 units due to an internal resistor failure under high voltage, marked by the famous "triple-chirp" audible alert.
  • Physio-Control LIFEPAK & HeartSine Recalls (2025-2026): Continued lot-specific actions for software anomalies and battery connector faults highlight the ongoing need for fleet monitoring.
• Regulatory Anchor: In a landmark regulatory shift, the FDA approved the ZOLL Premarket Approval (PMA) P160022 (covering the X Series, R Series, AED Pro, and AED 3) using device-generated real-world evidence (RWE), establishing a new precedent for post-market data utilization.

---

AED and External Defibrillator Classification Matrix

To understand the post-market safety profile of these devices, we must first define their FDA product codes. External defibrillators are distinct from implantable cardioverter-defibrillators (ICDs) and are governed by different regulations:

Product Code	Device Type / Common Name	FDA Device Class	Regulation Number	Primary Users / Setting
MKJ	Automated External Defibrillator (Non-Wearable)	Class III	21 CFR 870.5310	Public Access Responders, Schools, Airports
NSA	Over-The-Counter (OTC) Public Access AED	Class III	21 CFR 870.5310	Lay Bystanders, Homes, Public Facilities
MVK	Wearable Automated External Defibrillator (WAD)	Class III	21 CFR 870.5310	At-risk patients (e.g., ZOLL LifeVest)
DRK	High-Energy DC Defibrillator (incl. paddles)	Class III	21 CFR 870.5300	Hospital Code Teams, EMS, Paramedics
LDD	Low-Energy DC Defibrillator (manual)	Class II	21 CFR 870.5300	Clinical monitoring, electrophysiology
MPC	Atrial Defibrillator (External)	Class III	21 CFR 870.5300	Hospital-based cardioversion
DRL	Defibrillator Tester / Analyzer	Class II	21 CFR 870.5325	Clinical Engineering / Biomed Labs

Differentiating External AEDs from Implantable ICDs

A common point of confusion in post-market surveillance is the distinction between external AEDs (MKJ, NSA, DRK) and implantable cardioverter-defibrillators (ICDs) or pacemakers (NIK, MRM, LWS, NVY). These device classes differ fundamentally:

• Target Users and Environment: ICDs are surgically implanted inside the patient's chest and deliver shocks automatically via intravascular leads. They operate continuously inside the human body. External AEDs are applied to the patient's chest externally via adhesive pads during an emergency and are operated by lay bystanders or paramedics.
• Failure Mechanisms:
  • Implantable ICDs fail primarily due to lead-conductor fracture, insulation degradation from mechanical stress in the heart, or battery depletion.
  • External AEDs fail primarily due to internal component failures (resistors, capacitors), software algorithm errors (failing to recognize shockable rhythms), electrode pad dry-out, or external battery connector corrosion.
• Regulatory Pathways: While both are Class III devices, ICDs have been regulated under the PMA pathway for decades. The FDA transitioned AEDs from Class II (510k) to Class III (PMA) in the mid-2010s to address a persistent pattern of manufacturing quality issues.

---

The Regulatory Transition: 510(k) to PMA (21 CFR 870.5310)

Historically, AEDs were cleared through the less stringent 510(k) premarket notification pathway as Class II devices. However, over the decade leading up to reclassification, the FDA received more than 70,000 adverse event reports associated with AED malfunctions, accompanied by dozens of product recalls affecting millions of devices. The persistent failures of batteries, software algorithms, and capacitors led the FDA to issue a final order in 2015 reclassifying AEDs to Class III.

Under this order, manufacturers were given strict deadlines to submit formal Premarket Approval (PMA) applications. A PMA requires clinical evidence demonstrating safety and effectiveness, as well as pre-approval inspections of manufacturing facilities under the Quality System Regulation. Devices that failed to secure a PMA by the final deadline (eventually enforced in 2021/2022) were legally forced off the US market. This regulatory transition reshaped the resuscitation industry, consolidating the market around a few major players—specifically ZOLL, Stryker (Physio-Control), and Philips—who possessed the resources to support PMA compliance.

---

Recommended Reading

Baxter FDA Device Footprint: 510(k), PMA, Recall & Manufacturing Analysis

Regulatory 510(k)2026-07-07 · 18 min read

Resuscitation Clinical Dynamics and Perfusion Physiology

Understanding the impact of AED malfunctions requires examining the clinical physiology of sudden cardiac arrest.

Perfusion Pressure and the Compression Fraction

During CPR, chest compressions generate Coronary Perfusion Pressure (CPP), which is the primary driver of myocardial blood flow.

• Perfusion Build-Up: It requires approximately 10 to 15 continuous chest compressions to build CPP to a level capable of delivering oxygen to the heart muscle.
• The Perfusion Drop: Any pause in compressions—such as when the AED is analyzing the heart rhythm or charging its capacitor—causes CPP to drop immediately to zero.
• Perfusion Recovery: Following the pause, the rescuer must perform another 10–15 compressions just to rebuild CPP to its pre-pause level.

The Cost of Device Delays

If an AED takes 20 seconds to analyze and charge due to software lag or capacitor degradation (compared to a modern standard of 5 to 8 seconds), the Chest Compression Fraction (CCF) drops significantly. A CCF below 60% is associated with a dramatic decrease in the rate of Return of Spontaneous Circulation (ROSC). Therefore, a slow or malfunctioning AED is not merely a documentation nuisance; it directly compromises myocardial perfusion and patient survival.

---

FDA Recall Volume and Manufacturer Distribution

The FDA's recall database lists 373 recalls for external defibrillators and accessories. In contrast to the stent database, which is dominated by a single manufacturer, resuscitation device recalls are spread across several major market leaders.

Defibrillator Recalls by Recalling Firm

Recalling Firm	Recalls Count	Combined Share	Primary Product Codes	Key Lineage / Mergers
Philips entities	112	30.0%	MKJ, DRK	HeartStart, XL+, MRx
Physio-Control / Stryker entities	75	20.1%	MKJ, DRK	LIFEPAK 15, LIFEPAK CR Plus
Cardiac Science Corporation	46	12.3%	MKJ	Powerheart G3, Powerheart G5
ZOLL Medical / ZOLL Manufacturing	23	6.2%	MKJ, MVK, DRK	AED Plus, AED 3, R Series, LifeVest
Defibtech, LLC	19	5.1%	MKJ	Lifeline AED, Lifeline VIEW
Medtronic Emergency Response	17	4.6%	MKJ, DRK	LIFEPAK (pre-acquisition)
ConMed Corporation	16	4.3%	DRK	Pad connectors, cables
HeartSine Technologies	10	2.7%	MKJ	Samaritan PAD, Pad-Pak
Welch Allyn	9	2.4%	MKJ	Protocol, MRL AEDs
Other Manufacturers	46	12.3%	Various	Schiller, Kestra, Cardiac Science variants
Total	373	100%

Note: The FDA records defibrillator recalls under many corporate-name variants, which must be consolidated to evaluate manufacturer risk. Philips' 112 recalls span ten entities (Philips Medical Systems 31, Philips Healthcare 20, Philips Medical Systems Inc. 18, Philips North America 27, Philips Electronics North America 11, and five others). Physio-Control's 75 recalls include six recorded under "Medtronic Physio Control Corp" from before Stryker's 2016 acquisition; those are counted with Physio-Control, not Medtronic. ZOLL's 23 recalls include four under "Zoll Lifecor" (the LifeVest wearable). Counts were computed by consolidating all FDA recall records across product codes MKJ, NSA, MVK, DRK, LDD, MPC, and DRL.

Recalls by Year: A Steady Cadence of Corrective Actions

Unlike stents, which peaked sharply in 2011, external defibrillator recalls show a steady, ongoing pattern of corrective actions over the past decade. This reflects the constant maintenance required for software, battery technology, and electronic components:

Year   Recall Count
2020   [█████████████████] 17
2021   [██████] 6
2022   [████] 4
2023   [███████████████] 15
2024   [███████████] 11
2025   [████████████████████] 20
2026   [██] 2

This persistent recall activity was a key driver behind the FDA's decision to enforce PMA requirements for all AEDs, forcing manufacturers to meet the highest level of regulatory scrutiny.

---

Detailed Failure Mode Analysis: Why AEDs Fail

To manage an AED fleet effectively, safety managers must understand the specific electrical and mechanical failure modes that occur in the field:

Common AED Failure Modes
 ├── Resistor Failure (High Voltage) ──> Internal Short-Circuit (Zero Shock Delivery)
 ├── Capacitor Degradation ────────────> Charge Time Exceeds 15s (Delayed Therapy)
 ├── ECG Algorithm Errors ─────────────> False Negative (Failure to Shock VF/VT)
 ├── Electrode Pad Dry-out ────────────> High Impedance (Poor Skin Contact Alert)
 └── Battery Contact Corrosion ────────> Sudden Shutdown during Self-Test

1. High-Voltage Resistor Failure

The defibrillator's internal circuitry relies on high-voltage resistors to control the energy pathway from the capacitor to the electrode pads. If a resistor fails under high voltage:

• The Failure: The electrical charge is diverted internally, causing a short-circuit.
• The Outcome: The device fails to deliver a shock, or delivers a sub-therapeutic energy level.

2. High-Voltage Capacitor Degradation

Defibrillators use specialized capacitors to store and rapidly discharge up to 360 Joules of energy. Over time, these capacitors can degrade or leak electrolyte:

• The Failure: The capacitor cannot hold a full charge or takes too long to charge.
• The Outcome: The charge time exceeds the clinical threshold (typically 10–15 seconds). Any delay in shock delivery during ventricular fibrillation (VF) directly reduces the patient's survival window.

3. ECG-Analysis Algorithm Anomalies

AEDs rely on software algorithms to analyze the patient's heart rhythm and determine if a shock is indicated.

• The Failure: Software bugs or signal-noise interference can cause the algorithm to misinterpret the rhythm.
• The Outcome: The device may fail to advise a shock during ventricular fibrillation (VF) or ventricular tachycardia (VT) (false negative), or advise a shock during a perfusing rhythm (false positive).

4. Electrode Pad and Connector Deterioration

The interface between the defibrillator and the patient is the adhesive electrode pad.

• The Failure: The conductive gel on the pads dries out over time, or the foil backing corrodes.
• The Outcome: High skin-to-electrode impedance. The AED will detect the poor connection and emit a "check pads" voice prompt, halting the rescue sequence.

---

Recommended Reading

Becton Dickinson (BD) FDA Device Footprint: 510(k), PMA, Recall & Manufacturing Analysis

Regulatory 510(k)2026-07-07 · 18 min read

QMS and Manufacturing Quality Systems Implications (21 CFR Part 820)

Analyzing the root causes of all 373 defibrillator recalls reveals where manufacturing quality systems fail:

1. Nonconforming Material / Component (68 recalls): Defibrillator manufacturers rely on external suppliers for specialized capacitors, resistors, and battery cells. If a supplier changes their manufacturing process without notifying the medical device manufacturer, or if incoming inspection fails to detect component defects, the defibrillator's QMS is compromised. Under 21 CFR 820.50 (Purchasing Controls), manufacturers must maintain strict control over suppliers and perform rigorous testing on all incoming critical components.
2. Process Control (62 recalls): Assembly failures, such as inadequate soldering on circuit boards, which can lead to open circuits when the device is subjected to vehicle vibrations in ambulances or police cruisers.
3. Device Design (59 recalls): Hardware design flaws that make the device vulnerable to moisture ingress or electrostatic discharge (ESD).
4. Software Design (33 recalls): Errors in self-test protocols or ECG-analysis algorithms. Under 21 CFR 820.30(g) (Design Validation), manufacturers must perform comprehensive software regression testing to ensure that firmware updates do not introduce new safety issues.

---

MAUDE Adverse Events Deep Dive

While recall notices target specific lots, the MAUDE database reveals the continuous, daily volume of adverse events reported in the field. Filtering the 25-million-row MAUDE database for external defibrillator product codes (MKJ, NSA, MVK, DRK, LDD, MPC) reveals a massive safety footprint:

Annual MAUDE Defibrillator Report Volumes (2024 vs. 2025)

The volume of reported malfunctions and injuries is exceptionally high, reflecting both the large installed base of AEDs and the strict reporting requirements for resuscitation equipment:

Metric	2024 Reports	2025 Reports	2-Year Trend / Notes
Total Defibrillator Reports	27,951	26,411	Extremely high post-market reporting footprint
Device Malfunctions	23,916 (85.6%)	22,184 (84.0%)	Dominant category; typically battery/pad alerts
Patient Injuries	3,584 (12.8%)	3,813 (14.4%)	Burns or chest trauma from shock delivery
Flagged Deaths	450 (1.6%)	412 (1.6%)	Patient died during a cardiac arrest rescue attempt
Other / Unclassified	1	2	Reporting anomalies

Manufacturer Concentration in MAUDE (2024)

Analyzing the manufacturer field in the 2024 MAUDE dataset reveals which brands dominate the clinical adverse-event record:

1. ZOLL Manufacturing Corp / ZOLL Medical Corp: 16,617 reports (combined). ZOLL represents approximately 59.4% of all resuscitation reports in MAUDE. This concentration is driven by two main factors: their dominant market share in the EMS and hospital sectors, and the high reporting volume from their wearable AED line (LifeVest, product code MVK).
2. Physio-Control (Stryker): 3,527 reports. Primarily driven by the LIFEPAK 15 professional monitor/defibrillator and the LIFEPAK CR Plus public-access AED.
3. Philips North America / Philips Medical Systems: 2,513 reports in 2024. Primarily driven by the HeartStart family of devices.

---

High-Acuity Case Studies

To understand how these failures impact clinical operations, we must examine two major post-market events.

1. The Sept 2012 Philips HeartStart FRx/HS1 Class I Recall

The largest recall in AED history targeted the Philips HeartStart FRx, HS1 Home, and OnSite AEDs sold between 2005 and 2012, affecting approximately 700,000 units.

• The Failure Mode: A specific internal resistor could fail under high voltage during the device's automatic self-test or during a live rescue attempt. This failure prevented the device from delivering a therapeutic shock.
• The "Triple-Chirp" Alert: Philips designed the device to detect this resistor failure during its daily self-test. If the failure was detected, the AED would halt operation, emit an audible "triple-chirp" alert, and flash a yellow button.
• Clinical and Legal Impact: If the device failed during a live rescue attempt, the delay in therapy was frequently fatal. This recall led to extensive class-action lawsuits and was a key catalyst for the FDA's decision to reclassify AEDs as Class III devices, requiring formal Premarket Approval (PMA) for all manufacturers.

2. 2025–2026 Physio-Control LIFEPAK and HeartSine Recalls

Post-market actions for resuscitation devices remain active through 2026:

• LIFEPAK CR2 Software Recall (2025): Physio-Control (Stryker) recalled specific CR2 AEDs due to a software defect that caused the device to freeze during initialization, preventing the user from delivering a shock.
• HeartSine Pad-Pak Connector Fault (2026): A recall was issued for HeartSine Samaritan PAD devices due to a manufacturing defect in the battery-and-pad cartridge (Pad-Pak) connector pins, which could lead to intermittent power loss or false "low battery" alerts.

---

Recommended Reading

FDA Dermal Filler Approvals and Adverse Events: A 30-Year MAUDE and PMA Analysis

Regulatory Clinical Evidence2026-06-21 · 8 min read

Sibling Device Comparison: Resuscitation vs. Cardiac Rhythm Management

To put this data in perspective, we can compare external defibrillators to other cardiovascular devices (for the implantable side, see our pacemaker and ICD lead recall teardown):

Feature / Metric	External AEDs / Defibs	Implantable Pacemakers / ICDs
FDA Product Codes	MKJ, NSA, DRK, MVK	NIK, MRM, LWS, NVY
Typical Setting	Public locations, EMS, Code Teams	Surgically implanted inside the patient
Primary User	Lay bystanders, EMS, Nurses	Automatically delivered by the implant
Post-Market Report Volume	Very High (~27,000 reports/yr)	Very High (~50,000 reports/yr)
Key Mechanical Failure	Battery connector wear, pad gel dry-out	Lead conductor fracture, insulation wear
Key Electrical Failure	Resistor short-circuit, capacitor leak	Circuitry drift, battery depletion
Clinical Vulnerability	Long storage periods without use	Constant mechanical stress in the heart
Regulatory Status	Class III (PMA)	Class III (PMA)

---

Biomedical Testing and Preventive Maintenance Protocol

To mitigate the risk of sudden AED failure during an emergency, clinical engineering departments and safety managers must establish a proactive preventative maintenance (PM) program. Below is the standard PM checklist recommended for institutional AED fleets:

1. Daily Visual Inspection

• Verify that the status indicator (LCD screen or flashing LED) shows the "OK" symbol.
• Confirm the presence of the patient preparation kit (scissors, razor, pocket mask, nitrile gloves) attached to the carrying case.
• Inspect the outer casing for cracks or fluid ingress.

2. Quarterly Battery and Pad Verification

• Check the expiration date printed on the pre-connected electrode pads. Replace immediately if within 30 days of expiry.
• Check the battery cartridge manufacture or install date. Proactively replace lithium batteries every 4 years, regardless of indicating status, to avoid sudden voltage drop under load.
• Inspect battery contacts for corrosion or dust. Clean with a dry microfiber cloth if necessary.

3. Annual Defibrillator Analyzer Testing (Clinical Engineering)

For manually operated defibrillators (DRK) and AEDs in clinical environments, utilize a certified Defibrillator Analyzer (e.g., Fluke Biomedical Impulse 7000DP) to measure:

• Energy Output Accuracy: Discharge the device at 150J, 200J, and 360J. Measured energy must be within ±15% (or ±4J, whichever is greater) of the selected setting.
• Charge Time: Measure the time required to charge the capacitor to maximum energy. Charge time must not exceed 10 seconds.
• Synchronizer Delay Time: For manual units, verify cardioversion sync delay is under 60 milliseconds from the peak of the R-wave.

---

Actionable Recommendations for AED Fleet Managers

Based on this post-market surveillance data, facility safety managers and clinical engineers should implement the following steps:

1. Establish a Dedicated "Triple-Chirp" Inspection Protocol: For facilities operating Philips HeartStart fleets, verify that safety personnel are trained to recognize the "triple-chirp" audible alert. Unlike standard low-battery beeps, a triple-chirp indicates a critical hardware failure that requires immediate device replacement.
2. Implement Active Pad and Battery Rotation: Do not wait for the AED to emit a low-battery alert. Implement a proactive replacement schedule based on the expiration dates printed on the pads and batteries. Ensure that replacement gel pads are stored between 15°C and 35°C to prevent the conductive gel from drying out prematurely.
3. Perform Post-Incident MAUDE Audits: If an AED is deployed during a cardiac arrest and fails to deliver a shock, do not simply replace the battery and return the unit to service. Extract the device's internal event log, perform a biomedical test, and file a report in the MAUDE database to help track potential system-wide failures.
4. Reconcile Corporate Name Variants: Ensure your asset management software maps all historical corporate names to the current manufacturer entity (e.g., Cardiac Science, Welch Allyn, and HeartSine are now under Zoll, Stryker, or Philips). This is critical for receiving and acting on manufacturer recall notices.
5. Verify Supplier Quality Agreements: For medical device manufacturers, establish strict Quality Agreements with component suppliers (specifically for capacitors and resistors). Enforce incoming inspection testing that subjects components to high-voltage stresses to identify infant mortality failures before assembly.

---

Recommended Reading

FDA Ventilator Recalls: Class I Events, MAUDE Deaths & Root-Cause Analysis (2024–2026)

Post-Market Surveillance Regulatory2026-07-07 · 18 min read

Frequently Asked Questions

How is an AED recall different from an implantable ICD recall?

An AED recall involves an external device and is typically resolved by updating the device's software, replacing a battery cartridge, or exchanging the unit. An ICD recall involves a surgically implanted device; resolving it may require surgical extraction of the device or leads, which carries significant clinical risks.

How many deaths and injuries are reported in MAUDE for AEDs each year?

MAUDE records approximately 400 to 450 deaths and 3,500 to 3,800 patient injuries annually associated with external defibrillators and AEDs. These reports represent incidents where a patient died or was injured during a rescue attempt; they do not necessarily prove that the AED caused the death, but they are a critical indicator of device performance.

Why did Philips recall the HeartStart FRx and HS1, and how many units?

Philips recalled approximately 700,000 units sold between 2005 and 2012 due to a high-voltage resistor failure. When the resistor failed, the device could not deliver a shock. The device was designed to emit an audible "triple-chirp" alert when this failure was detected during self-tests.

Which AED brand has the most recalls or MAUDE reports?

For MAUDE adverse-event volume, ZOLL Manufacturing and ZOLL Medical dominate, totaling over 16,000 reports annually — driven by their large share of professional EMS defibrillators and the high reporting volume from the wearable LifeVest (MVK). For official FDA recalls, Philips leads the historical record with 112 consolidated recalls, followed by Physio-Control/Stryker (75) and Cardiac Science (46).

What is the triple-chirp alert on a Philips HeartStart AED?

The triple-chirp is an audible warning emitted by Philips HeartStart FRx and HS1 defibrillators when they detect a critical internal hardware failure (such as a failed resistor) during automatic daily self-tests. A device emitting this alert must be removed from service immediately.