FDA Infusion Pump Recalls: 1,180 Events and the Class I Software-and-Alarm Causes
FDA infusion pump recall analysis: 1,180 events, 189 Class I actions. Software and alarm defects dominate the most serious recalls, led by BD, Baxter, and ICU Medical.
Executive Summary
Infusion pumps are one of the most regulated device categories in hospitals — and one of the most recalled. Our analysis of the complete FDA device recall and enforcement record for the infusion-pump product-code family (general, elastomeric, PCA, insulin, enteral, and implanted pumps under 21 CFR 880.5725 and related codes) finds 1,180 individual recall events spanning more than two decades:
- 189 of these were escalated to FDA Class I — the classification reserved for devices where continued use may cause serious injury or death — and 131 of those Class I events involve general-purpose electromechanical infusion pumps (product code FRN)
- Software defects and alarm failures dominate the root causes: across all 1,180 events, "software" appears in 145 reason statements and "alarm" in 124, far ahead of leaks (72), occlusion (61), and battery faults (57)
- Class I activity is clustered and recent: 27 events in 2020, 27 in 2025, 18 in 2023, and 17 in 2024 — together accounting for the bulk of the classified Class I record, with 2025–2026 actions by Baxter (Sigma Spectrum), BD (Alaris), Smiths Medical/ICU Medical (CADD-Solis), and Zyno Medical all traceable to software or alarm defects
- CareFusion 303 (now BD), Baxter, Hospira (now ICU Medical), Smiths Medical (now ICU Medical), and Medtronic Neuromodulation are the most frequently named firms in Class I infusion-pump events — a concentration that mirrors industry consolidation in the large-volume pump market
For quality and regulatory professionals, the pattern is clear: infusion-pump recall risk is overwhelmingly a software, alarm, and fluid-path integrity problem, and the firms carrying the largest installed base carry the largest recall footprint.
Why Infusion Pumps Are a High-Risk Category
Infusion pumps deliver high-alert medications — insulin, opioids, heparin, vasopressors, chemotherapy — where a flow-rate error of a few milliliters per hour can be fatal. The Institute for Safe Medication Practices (ISMP) has repeatedly identified infusion-pump programming errors among the top medication-safety hazards, and ECRI Institute has listed infusion-system alarm hazards and dose-error reduction concerns in its annual top-10 health-technology hazards (ECRI, 2026).
The problem is not new, and FDA has treated it as systemic for over a decade. In its 2010 Infusion Pump Improvement Initiative white paper, the agency reported roughly 56,000 adverse-event reports associated with infusion pumps from 2005 through 2009, and 87 recalls over the same window (70 Class II, 14 Class I), and concluded that "many of these problems appear to be related to deficiencies in device design and engineering" — offering to review manufacturers' pump software source code pre-submission (FDA, 2010). The single largest infusion-pump action of the modern era, BD's 2020 Alaris recall, covered approximately 774,000 pumps and was tied to 55 injuries and one death, with follow-on Class I actions for replacement bezel components through 2024 (Fierce Biotech, 2024).
The device category itself is broad. FDA classifies infusion pumps under several product codes, all but a few at Class II under regulation 880.5725:
| Product code | Device | FDA class |
|---|---|---|
| FRN | Pump, Infusion (general-purpose pump) | II |
| MEB | Pump, Infusion, Elastomeric | II |
| MEA | Pump, Infusion, PCA (patient-controlled analgesia) | II |
| LZH | Pump, Infusion, Enteral | II |
| LZG | Pump, Infusion, Insulin | II |
| OPP | Pump, Infusion, Insulin Bolus | II |
| QJY | Infusion Pump, Drug-Specific, Pharmacy-Filled | II |
| QFG | Alternate-Controller-Enabled Insulin Infusion Pump | II |
| LKK | Pump, Infusion, Implanted, Programmable | III |
| MRZ | Accessories, Pump, Infusion | II |
| LDR | Controller, Infusion, Electronic | II |
This analysis covers all eleven codes. The general-purpose pump (FRN) is by far the largest contributor to recall volume, but the implanted and insulin pump codes carry a disproportionate share of the most serious actions relative to their unit counts.
Data Source and Method
- Sources: FDA Medical Device Recall database (device recall records) cross-referenced to the FDA device enforcement report database, which assigns the Class I / II / III classification
- Analysis sample: 1,180 recall records tagged to the 11 infusion-pump product codes above; of these, 584 join to a classified enforcement record (189 Class I, 388 Class II, 7 Class III)
- Run date: 2026-06-14
- Method: All counts were computed by MedDeviceGuide from the public FDA recall and enforcement extracts. Root-cause keywords were tallied across each record's reason-for-recall text. Records that do not carry an FDA classification (older actions, actions not yet classified, or records present in only one of the two databases) are reported separately rather than imputed. Firm names are reproduced as recorded by FDA; corporate successors are noted in the text.
The Recall Footprint by Product Code
The 1,180 events are concentrated in the general-purpose pump, with a long tail across specialty pumps:
| Product code | Device | Recall events |
|---|---|---|
| FRN | Pump, Infusion | 716 |
| LKK | Pump, Implanted, Programmable | 131 |
| LZG | Pump, Insulin | 124 |
| MEB | Pump, Elastomeric | 109 |
| MEA | Pump, PCA | 46 |
| LZH | Pump, Enteral | 24 |
| QFG | Alt-Controller Insulin Pump | 16 |
| MRZ | Accessories, Pump | 8 |
| LDR | Controller, Electronic | 5 |
| OPP | Pump, Insulin Bolus | 1 |
The general-purpose pump's 716 events reflect both its enormous installed base in hospitals and the complexity of its software-controlled delivery. The implanted (LKK, 131) and insulin (LZG, 124) codes are notable because their recall counts are high relative to far smaller unit volumes — a reminder that life-sustaining ambulatory and implanted pumps generate outsized post-market activity.
Class I: Where the Serious Actions Cluster
Of the 584 infusion-pump recalls that carry an FDA classification, 189 — roughly one in three — are Class I. That share is exceptionally high for a Class II device family and reflects the direct line between an infusion-pump defect and a life-threatening medication error.
| Product code | Device | Class I events |
|---|---|---|
| FRN | Pump, Infusion | 131 |
| LKK | Pump, Implanted, Programmable | 23 |
| MEB | Pump, Elastomeric | 14 |
| LZG | Pump, Insulin | 9 |
| QFG | Alt-Controller Insulin Pump | 7 |
| MEA | Pump, PCA | 5 |
The Class I record is sharply cyclical rather than steady, with large spikes in 2020, 2023, and 2025:
| Year | Class I infusion-pump events |
|---|---|
| 2020 | 27 |
| 2025 | 27 |
| 2023 | 18 |
| 2024 | 17 |
| 2021 | 12 |
| 2014 | 11 |
The 2020 spike corresponds to the Philips and ICU Medical / Hospira action waves; the 2025 spike reflects the recent Baxter Sigma Spectrum, BD Alaris, and Zyno Medical software recalls (described below). Quality teams benchmarking pump reliability should weight recent years heavily — the post-2020 period, not the long-run average, is the relevant baseline.
Root Causes: Software and Alarms First
Tallying the reason-for-recall text across all 1,180 events produces a consistent hierarchy of failure modes:
| Root-cause theme | Events mentioning | Example failure mode |
|---|---|---|
| Software defect | 145 | Wrong firmware version loaded; verification/validation gaps; unverified software released |
| Alarm failure | 124 | False or missing occlusion/air-in-line alarms; alarm volume too low |
| Leak | 72 | Fluid-path, cassette, or administration-set leaks |
| Occlusion | 61 | Undetected upstream/downstream occlusion; false occlusion alarms |
| Battery / power | 57 | Unexpected shutdown; battery failure |
| Labeling | 44 | Mislabeled sets or concentrations |
| Connector | 44 | Administration-set incompatibility; luer faults |
| Display / screen | 62 | Frozen, blank, or incorrect display (41 display + 21 screen) |
| Administration set | 26 | Set-specific delivery variability |
| Air-in-line | 9 | Faulty air detection; risk of venous air embolism |
| Free flow | 9 | Unrestricted gravity delivery when metered flow intended |
Software and alarms together account for the dominant share — and they are also the failure modes most likely to escalate to Class I, because a software defect or a missing alarm can silently cause over- or under-infusion of a high-alert drug. An academic hazard analysis of infusion-pump adverse events reached the same conclusion from a different angle: of 70 reported adverse events, 17 traced to software failures and 15 to alarm failures (false alarms and no-alarm conditions), with component failures such as pump-door and flow-restrictor faults close behind (Wang et al., J Healthc Eng / PMC).
Recent Class I Actions Fit the Pattern
The most recent Class I infusion-pump recalls read like a worked example of the root-cause table above:
- Baxter Sigma Spectrum (Class I, initiated June 2025) — software intended for the V8 platform loaded onto V6 pumps and vice versa, causing inaccurate flow rates and over- or under-infusion over long run times (FDA, 2025)
- BD Alaris Pump Module 8100 (Class I, July–September 2025) — a subset of compatible infusion sets produced delivery variability inconsistent with the user manual, with heightened risk for neonates and critically ill patients (FDA/BD, 2025)
- Smiths Medical CADD-Solis (Class I) — a false upstream-occlusion alarm that interrupted or delayed ambulatory infusions of high-alert medications; Smiths Medical is now part of ICU Medical (FDA, 2026)
- Zyno Medical Z-800 series (Class I, June 2025) — incorrect, unvalidated software released to customers, affecting air-in-line detection, alarm volume, and reverse-flow prevention, with worst-case risks of venous air embolism and flow reversal (ONS/FDA, 2025)
Every one of these actions is a software, alarm, or set-compatibility defect — exactly the failure modes the data predicts.
The Firms Behind the Class I Record
The Class I infusion-pump events are dominated by a small group of manufacturers whose installed bases have consolidated through acquisition:
| Recalling firm (as recorded by FDA) | Class I events | Current parent |
|---|---|---|
| CareFusion 303, Inc. | 35 | BD (acquired CareFusion, 2015) |
| Baxter Healthcare Corporation | 19 | Baxter |
| Hospira Inc. | 18 | ICU Medical (Hospira Infusion Systems, via Pfizer, 2017) |
| Symbios Medical Products, LLC | 12 | — |
| Smiths Medical ASD Inc. / Smiths Medical ASD, Inc. | 18 (12 + 6) | ICU Medical (acquired Smiths Medical, 2022) |
| Medtronic Neuromodulation | 12 | Medtronic (implanted pumps) |
| Codman & Shurtleff, Inc. | 10 | Integra LifeSciences |
| Fresenius Kabi USA, LLC | 8 | Fresenius |
| ICU Medical Inc | 7 | ICU Medical |
| Tandem Diabetes Care | 5 | Tandem Diabetes Care |
| Zyno Medical LLC | 5 | Zyno Medical |
The corporate succession matters for recall interpretation. CareFusion's pump business (the Alaris line) passed to BD in 2015 in a $12.2 billion transaction (BD, 2015). Hospira's infusion-systems business moved from Pfizer to ICU Medical in 2017 (ICU Medical), and Smiths Medical followed in January 2022, making ICU Medical the successor for two of the largest Class I footprints in the data. FDA warning-letter and recall records continue to cite the original legal entities for years after a transaction, so the CareFusion and Hospira names in the table above should be read as the lineage of what is now primarily the BD Alaris and ICU Medical Plum/CADD/Plum 360 platforms.
What This Means for Quality and Regulatory Teams
The data supports four practical takeaways:
- Treat software and alarm integrity as the primary recall-risk controls. Design controls, IEC 62304 software lifecycle evidence, and alarm-management validation (IEC 60601-1-8) are where post-market exposure is created or avoided for this device family.
- Plan for multi-model software recalls. The Baxter Spectrum and Zyno Z-800 actions both involved the wrong software version deployed across model variants — a configuration-management failure that standard release controls should catch.
- Benchmark against the post-2020 baseline, not the long-run average. Class I infusion-pump activity is elevated and cyclical; a static five- or ten-year average understates current risk.
- Track the installed base, not just the brand name. Because CareFusion, Hospira, and Smiths Medical recall records now sit inside BD and ICU Medical, a firm's effective infusion-pump recall exposure is larger than its current-branded product list suggests.
Infusion pumps will remain a focus of FDA enforcement for as long as they deliver high-alert drugs under software control. The device family's recall record is, in effect, a public dataset on what goes wrong when that control fails — and the consistent answer, across 1,180 events, is software, alarms, and the fluid path.
Data sources: FDA Medical Device Recall database and FDA device enforcement report database; analysis by MedDeviceGuide, run date 2026-06-14. Root-cause themes are derived from FDA reason-for-recall text and are not mutually exclusive. This article is educational and is not regulatory, quality-system, or clinical advice for a specific product.