FDA Pacemaker and ICD Recalls: 451 Enforcement Actions and the Lead-Failure Record

Executive Summary

Cardiac implantable electronic devices (CIEDs) — pacemakers, implantable cardioverter-defibrillators (ICDs), and cardiac resynchronization therapy devices — are the highest-stakes device family the FDA regulates by volume of Class I action. Our analysis of the complete FDA recall, enforcement, 510(k), PMA, and MAUDE record for the implantable-pacemaker and ICD product-code family finds a category defined by lead failure, software, and battery faults:

• 451 FDA enforcement actions match pacemaker and ICD devices, of which 188 are Class I — the classification reserved for situations where use may cause serious injury or death — and 261 are Class II, making this one of the most Class I-heavy device families in the FDA's enforcement record
• 637 recall events are recorded under the seven implantable-pacemaker and ICD product codes, with Medtronic (174), Boston Scientific (110 + 68 across two entities), Guidant (37), and St. Jude Medical / Abbott (34) carrying the majority; device design (120), software design (69), and nonconforming material (49) are the leading root-cause categories
• The MAUDE adverse-event record is the largest of any implant family we have analyzed: we count 558,223 device-event reports under the CIED product codes across 2015–2026, including 8,166 death reports, 296,741 injury reports, and 253,252 malfunction reports, with annual volume running above 50,000 reports in every recent year
• The Class I record is now a software and lead-impedance problem: recent Class I actions center on Boston Scientific's Accolade pacemaker battery "Safety Mode" fault (more than one million devices, December 2024 onward) and the Endotak Reliance ePTFE defibrillation-lead calcification issue (three Class I recalls confirmed September 2025, linked to 386 serious injuries and 16 deaths)

For cardiac-rhythm-management, quality, and regulatory teams, the pattern is specific: the most serious CIED recalls are a software-update and lead-impedance surveillance problem concentrated in two manufacturers, on top of a baseline lead-fracture history (Sprint Fidelis, Riata) that reshaped post-market surveillance expectations for the entire category.

Why CIED Recalls Are Almost Always Class III PMA Devices

Implantable pacemakers and ICDs are Class III, high-risk devices that require premarket approval (PMA). They are not eligible for 510(k), and our data confirms the historical transition: we count 461 510(k) clearances under the CIED product codes, but almost all predate 1998 — the applicants (Medtronic Vascular, Intermedics, Telectronics, Cardiac Pacemakers Inc., Pacesetter) are the legacy firms that operated before the category was fully called up to PMA. By contrast, 8,368 PMA records — 55 original approvals plus their supplements — sit under the same codes, dominated by Medtronic (3,103 across entities), Boston Scientific (2,114), Abbott Medical (1,285), and Biotronik (768).

The supplement volume (more than 8,000) reflects the engineering reality of active implantables: these devices are iterated continuously through PMA supplements over decades of post-approval change. That is also why the recall record is large — the installed base is enormous, the devices are life-sustaining, and any field issue in a population of millions becomes a major action.

This analysis covers the implantable CIED product-code family:

The seven codes capture the implanted generators, the defibrillation leads (under LWS), and the non-implanted programmers and remote monitors (OSR) that generate a large share of routine MAUDE reports.

Data Source and Method

• Sources: FDA device enforcement report database (Class I/II/III classification and reason-for-recall text), FDA Medical Device Recall database (recall initiation records by product code), FDA 510(k) and PMA databases, and the FDA MAUDE adverse-event database
• Analysis sample: 451 enforcement-report records whose product description and reason-for-recall text matches pacemaker and ICD devices; 637 recall events under the seven CIED product codes; 461 510(k) clearances and 8,368 PMA records under the same codes; 558,223 MAUDE device-event reports under the CIED codes across 2015–2026
• Run date: 2026-06-15
• Method: All counts were computed by MedDeviceGuide from the public FDA enforcement, recall, 510(k), PMA, and MAUDE extracts. Enforcement records do not carry a populated product-code field, so CIED records were identified by text matching of the device description and reason-for-recall fields; firm names are reproduced as recorded by FDA. MAUDE event-type counts (death, injury, malfunction) reflect reports filed, not confirmed causal attributions; a single adverse-event report can contain multiple device-event rows, and 2026 is an extract-limited partial year.

The Enforcement Footprint: A Class I-Heavy Record

Across the 451 CIED enforcement actions, the classification split is unusually weighted toward Class I — the most serious tier:

For comparison, the surgical-stapler and surgical-mesh enforcement records we have analyzed are overwhelmingly Class II; a 42% Class I share is what a life-sustaining implant family looks like in enforcement data. Enforcement activity spiked in 2023 (127 actions), reflecting the wave of Boston Scientific software and lead advisories, and has remained elevated since (43 in 2024, 24 in 2025).

The Class I reasons fall into two current fault modes that define the modern CIED recall:

• Battery high-impedance and "Safety Mode" — Boston Scientific Accolade family: pacemakers and CRT-P devices may enter Safety Mode (a back-up pacing mode) in an ambulatory setting due to a high battery-impedance state, requiring device removal and replacement; the FDA placed the action in Class I and Boston Scientific issued software maintenance releases (SMR5, SMR6) to prevent Safety Mode initiation (FDA, 2024; Cardiovascular Business)
• Lead-impedance calcification and shock failure — Boston Scientific Endotak Reliance ePTFE leads: ePTFE-coated defibrillation lead coils may biologically encapsulate and calcify, raising low-voltage shock impedance and potentially causing the lead to fail to deliver the full shock energy needed to restore normal rhythm during cardiac arrest; the FDA confirmed three Class I recalls in September 2025 (FDA, 2025; Cardiovascular Business)

The Lead-Failure Legacy: Sprint Fidelis and Riata

The Endotak Reliance action is the latest chapter in a lead-failure history that has shaped CIED post-market surveillance for two decades. The two landmark ICD-lead recalls established the template:

• Medtronic Sprint Fidelis (models 6930, 6931, 6948, 6949) — In October 2007, Medtronic voluntarily suspended worldwide distribution and recalled all unimplanted Sprint Fidelis defibrillation leads after a higher-than-expected fracture rate; the FDA classified the action as Class I (recall event Z-0067-2008, PMA P920015, product code LWS). More than 268,000 leads had been implanted worldwide, and Medtronic reported that fractures may have contributed to five deaths. Neither Medtronic nor the FDA recommended prophylactic lead removal, because the extraction procedure itself carries serious risk (FDA, 2007; Medtronic; VA Patient Safety Alert AL08-02).
• St. Jude Medical Riata and Riata ST silicone defibrillation leads — St. Jude (now Abbott) stopped selling the silicone-only Riata leads in December 2010 and issued an updated physician communication in November 2011 that the FDA classified as a recall, after reports of externalized conductors and lead-to-can abrasion. The case prompted a New England Journal of Medicine perspective titled "Here we go again — Another failure of postmarketing device surveillance" (Abbott).

The clinical-management tension is the central lesson of these recalls: preemptive extraction carries an estimated 2.5% major-complication risk, so most lead recalls are managed conservatively through enhanced remote monitoring rather than prophylactic replacement — except in pacemaker-dependent patients or those implanted for secondary prevention of sudden cardiac death (Hauser, HeartRhythm Case Reports).

The Generator-Recall Record: Battery, Software, and Header Faults

If the lead recalls defined the 2000s and 2010s, the generator recalls define the current decade — and they are large. A consolidated review of FDA Class I pacemaker and CRT-P generator recalls documents five landmark actions in the 2005–2021 window alone, each affecting tens of thousands to more than a hundred thousand units (El-Chami, HeartRhythm Case Reports):

These are the same fault families — battery integrity, software, and header/moisture — that drive the current Accolade-family and Endotak Reliance actions, and they explain why battery-design and software-design root causes sit atop the CIED recall record. The combined unit count of these five generator actions alone (approximately 483,000 units) exceeds the implanted base of most other device families.

The Current Accolade and Endotak Reliance Actions

The two active CIED Class I stories are the latest instances of these recurring fault modes:

• Boston Scientific Accolade pacemaker and CRT-P family — In December 2024, the FDA warned that Accolade-family devices (Accolade, Proponent, Essentio, Altrua 2, Visionist, Valitude) have an increased risk of entering "Safety Mode" during telemetry or other higher-powered operations because of a high battery-impedance state; once in Safety Mode the device provides only unipolar sensing and pacing and must be explanted and replaced. The action has been linked to more than 800 injuries and two deaths, and a 2025 JACC study found a 52% rate of major complications (presyncope, syncope, fall with trauma, pauses/asystole, death) among at-risk patients whose devices initiated Safety Mode (FDA, 2024; Cardiovascular Business; Boston Scientific, 2025). Boston Scientific issued Brady software maintenance releases (SMR5, SMR6) to prevent Safety Mode initiation; the FDA confirmed a further Class I correction in May 2026 expanding the affected population (AHA, 2026; HRS, 2026).
• Boston Scientific Endotak Reliance ePTFE defibrillation leads — Coils manufactured 2002–2021 (approximately 354,000 still in service) may biologically encapsulate and calcify, raising low-voltage shock impedance and potentially causing the lead to fail to deliver the full shock energy needed to terminate cardiac arrest. The action was linked to 386 serious injuries and 16 deaths as of July 2025, and the FDA confirmed three Class I recalls in September 2025 (FDA, 2025; Cardiovascular Business).

The MAUDE Adverse-Event Record

The MAUDE database shows the scale of the installed base and the surveillance burden. Under the seven CIED product codes, we count 558,223 device-event reports across 2015–2026, including 8,166 death reports, 296,741 injury reports, and 253,252 malfunction reports.

Annual volume has run above 50,000 reports in every recent year and is rising, consistent with a large and growing implanted population under continuous remote monitoring:

By manufacturer, the MAUDE footprint mirrors the recall footprint. Boston Scientific (149,833), St. Jude Medical / Abbott (69,314), Medtronic (46,582 plus its MPRI and Europe entities), and Guidant (now within Boston Scientific) account for the dominant share. The most-reported device entries are a mix of remote-monitor programmers and the pacing and defibrillation leads that anchor the failure record:

The patient-problem mix is dominated by "no clinical signs or symptoms" and "no known impact or consequence" entries — a signature of routine remote-monitoring and lead-surveillance reporting rather than acute harm — but the high-severity tail is real: 19,751 reports of "shock from patient lead(s)," 34,269 unspecified-infection reports (including pocket infections), 7,408 electric-shock reports, and 2,794 death-tagged reports in the problem field. The infection signal in particular — pocket erosion and infection clusters — is a known and growing CIED complication that drives extraction and reoperation.

The Recall Record and Root Causes

Across the 637 CIED recall events under the family product codes, the recalling-firm concentration reflects the consolidated cardiac-rhythm-management industry:

Tallying root-cause categories separates device-design and software-design faults (the lead and battery/Safety Mode problems) from material and component issues:

Device design (120) and software design (69) together account for the largest share — consistent with a family where the most serious actions are lead-mechanics, impedance-monitoring, and firmware-update problems rather than manufacturing-line defects.

What This Means for Quality, Regulatory, and Clinical Teams

The data supports four practical takeaways:

1. Treat firmware and impedance monitoring as the front line. The current Class I record is dominated by software updates (Accolade Safety Mode) and lead-impedance surveillance (Endotak Reliance). A post-market surveillance program for CIEDs should weight remote-monitor alerts, impedance-trending thresholds, and firmware-update campaigns as primary risk controls.
2. Read the MAUDE volume as surveillance density, not harm density. More than half of the problem entries are "no clinical signs" or "no known impact" — the cost of monitoring millions of implants continuously. Benchmarking against raw report counts overstates acute harm; the high-severity tail (shock-from-lead, infection, death) is the signal to isolate.
3. Manage lead recalls as conservative-by-default. The Sprint Fidelis and Riata precedent, and the 2.5% major-complication risk of extraction, mean that most lead advisories are managed by enhanced monitoring rather than prophylactic replacement — except in pacemaker-dependent or secondary-prevention patients. Plan advisories around this triage, not around blanket extraction.
4. Recognize supplier concentration as recall concentration. Because Medtronic, Boston Scientific (including legacy Guidant), and Abbott (including legacy St. Jude) carry both the largest PMA portfolios and the largest recall and MAUDE footprints, a health system's effective CIED recall exposure is concentrated in three supplier relationships and their installed lead models.

Cardiac implantable electronic devices are the device family where the FDA's Class I enforcement is most concentrated, where the MAUDE record runs above half a million reports across a decade, and where the modern recall is a firmware update and a lead-impedance threshold rather than a product removal. The public data — 451 enforcement actions with 188 Class I, 637 recall events, and 558,223 MAUDE reports — is the benchmark against which current CIED safety performance is measured.

Data sources: FDA device enforcement report database, FDA Medical Device Recall database, FDA 510(k) and PMA databases, and FDA MAUDE adverse-event database; analysis by MedDeviceGuide, run date 2026-06-15. Root-cause themes are derived from FDA recall and reason-for-recall text and are not mutually exclusive. MAUDE event-type counts reflect reports filed, not confirmed causal attributions. This article is educational and is not regulatory, quality-system, or clinical advice for a specific product or patient.