Alternate Controller Enabled Insulin Infusion Pump

Reports per year

Source: FDA adverse event reports by year received, 2020–2026. Reporting paused during the 2026 MAUDE-to-AEMS transition and has since resumed.

Recent recalls

• 2026-07-08Open, ClassifiedSoftware design

  MiniMed 780G Insulin Pump, REF: MMT-1885, MMT-1886, MMT-1895, MMT-1896

  A software anomaly can occur when the pump is paired with the Instinct sensor. Under certain circumstances, the pump unexpectedly stops delivering insulin and displays two error messages back-to-back: Pump Error 53 followed immediately by Pump Error 23. Insulin delivery will stop which may lead to delayed therapy and an increased risk of hyperglycemia or diabetic ketoacidosis (DKA).

• 2026-06-30Open, ClassifiedProcess design

  Omnipod 5 Pods. Includes the below Model/REF Numbers: 1. POD-OMNI-I1-6720. 2. POD-OMNI-I1-6220. 3. OMNI-I1-6729 (10-Pack), OMNI-I1-6720 (Single Pod). 4. OMNI-I1-6220. 5. OMNI-I1-6720. 6. BLE-H1-529 (10-Pack), BLE-H1-520 (Single Pod).

  External soft cannula damage during manufacturing that results in insulin leaking around the Pod instead of being delivered to the user regardless of basal or bolus delivery. The primary failure mode is pump under-delivery due to loss of insulin to an external leak. If insulin is not delivered properly, users may experience high blood glucose levels due to under-delivery of insulin. In the most severe cases, prolonged and persistent high blood glucose levels can lead to diabetic ketoacidosis (DKA), hyperglycemic hyperosmolar syndrome (HHS), or even death.

• 2026-06-18Open, ClassifiedSoftware design

  iLet Bionic Pancreas, REF: BB1001

  The reason for the recall is: it was found in version 3.3.6 of the iLet ACE Pump firmware and all previous releases that a screen unlock failure could occur when the user successfully slides the unlock slider on the Lock Screen, no screen transition occurs, and the user remains on the Lock Screen. Because the user cannot exit the Lock Screen, the user is unable to perform a cartridge change or meal announcement. If this occurs and therapy is in progress, therapy will continue normally until the insulin cartridge is depleted. The user will be unable to perform a cartridge change or a meal announcement and will be stuck on the screen until the battery fully drains. This can lead to hyperglycemia.

• 2026-04-29Open, ClassifiedSoftware change control

  iLet Bionic Pancreas, REF: BB1001

  insulin pump software versions 1.4.2, and 1.4.3 issue with Dexcom Continuous Glucose Monitoring (CGM) G7 sensor may result in delayed CGM reading then switch to non-CGM dosing, leading to only basal/requested meal doses provided, no correction doses/insulin reductions/suspensions for high/low glucose unless blood glucose entered for sensor life or replacement. Potential health risks to users include severe hyperglycemia with and without DKA and severe hypoglycemia.

• 2026-04-10Open, ClassifiedProcess design

  Omnipod 5 Pods. Model/Catalog number: PT-001662 ASM 5PK Pod STRL OPS G6G7

  Due to a manufacturing defect, certain Omnipod 5 Pods from 49 lots have an internal soft cannula tear that results in insulin leaking into the Pod instead of being delivered to the user regardless of basal or bolus delivery. This defect results from damage to the unexposed portion of the soft cannula during manufacturing, which would result in a compromised fluid path. The primary failure mode is pump under-delivery due to loss of insulin to an internal leak; in some cases, the defect may also lead to pump shutoff and cessation of insulin delivery when leaked insulin contacts Pod circuity in a manner that results in an electrical short. Under-delivery of insulin (both basal and bolus insulin) or cessation of insulin put users at risk of hyperglycemia, and complications from acute and chronic hyperglycemia, including dehydration, blurry vision, nausea, vomiting, altered mental status, diabetic ketoacidosis (DKA), hyperglycemic hyperosmolar syndrome (HHS), or even death. Users may require hospitalization or medical intervention to treat severe adverse health consequences. Not all devices with the defect will issue an alarm or alert the user. If there is sufficient leakage of insulin to cause a short in the circuity, the Pod will issue a Hazard Alarm that stops all insulin delivery and alerts the user to replace their Pod. In addition, if a user s glucose is trending high and is not responding to insulin delivery, the system may reach the maximum amount of insulin microboluses allowed by the system and trigger the Automated Delivery Restriction (ADR) alert that tells users to check their blood glucose and take appropriate actions (i.e., ADR is a response to persistent hyperglycemia and maximum automated delivery constraints rather than a direct detection of the leak). The magnitude of under-delivery is unknown and based on multiple factors, including how much insulin is being delivered, whether an alarm and/or alert triggers, whether and when the user recognizes the device defect, the duration of Pod use, and the size of the tear.

• 2026-04-10Open, ClassifiedSoftware design

  iLet Ace Pump Kit REF: BB1001 iLet Dosing Decision Software

  it was found that in versions 1.3.7, 1.4.2, and 1.4.3, the Lock Screen and Limited Access Passcode Screen on the iLet graphical user interface (GUI) include certain icons displayed in the status bar that are active, thereby allowing the user to bypass those screens when those icons on the status bar are pressed, allowing unauthorized access while the device is in Limited Access Mode. A Health Risk associated with Limited access mode includes severe hypoglycemia due to unauthorized access to the iLet if someone were to make unauthorized meal announcements or stopped insulin delivery.

• 2026-04-02Open, ClassifiedDevice Design

  MiniMed 780G Insulin Pump (MMT-1884, MMT-1885, MMT-1886, MMT-1894, MMT-1895, MMT-1896)

  All Medtronic MiniMed infusion pumps (Paradigm series, 600 series, and BLE 700 series) were found to be affected by unintended over- and under-delivery of insulin when the pump is elevated or lowered relative to the infusion site, respectively, because of changes in gravitational force impacting hydrostatic and hydrodynamic pressures. Insulin over-delivery, which can occur when the pump is elevated relative to the infusion site, can result in severe hypoglycemia, altered mental status, seizure, coma, or death. An under-delivery of insulin, which can occur at lowered pump height conditions relative to the infusion site, can result in severe hyperglycemia, dehydration, diabetic ketoacidosis, or death.

• 2026-03-25Open, ClassifiedProcess change control

  Tandem pumps are battery-operated infusion pumps capable of both basal and bolus delivery of insulin. The pumps utilize a motor-driven mechanism to deliver insulin from within a disposable cartridge, through an infusion set, into a patient s subcutaneous tissue. As with current insulin infusion pumps on the U.S. market, the desired timing and quantity of the insulin delivery is programmed by the user (i.e., the patient).

  The Czech language user guide contained multiple translation errors. The most significant error was that it incorrectly instructs users to verify that the infusion set is connected to the body, when it should instead direct users to confirm that the infusion set is not connected to the body. Following this instruction could result in unintended insulin delivery, potentially leading to a hypoglycemic event.

• 2026-03-24Open, ClassifiedSoftware change control

  MiniMed" 780G - MMT-1884 MiniMed" 780G - MMT-1886 With Software 6.60 and 6.61

  Three software defects (Pump Error 53, BG check, and Critical Pump Error (Open Book Image)) that occurred as a result of software updates (versions 6.60, 6.61, and 6.62), which could result in a risk of hypoglycemia or hyperglycemia due to inaccuracies in insulin delivery (either under-delivery, over-delivery, or cessation of delivery).

• 2025-11-05Open, ClassifiedSoftware design

  Tandem Mobi Insulin Pump: Description/Catalog: Tandem insulin pumps are battery-operated infusion pumps capable of both basal and bolus delivery of insulin. The pumps utilize a motor-driven mechanism to deliver insulin from within a disposable cartridge, through an infusion set, into a patient s subcutaneous tissue. As with current insulin infusion pumps on the U.S. market, the desired timing and quantity of the insulin delivery is programmed by the user (i.e., the patient). Pump, Tandem Mobi, Control-IQ/1010750, Pump, Tandem Mobi, Control-IQ, Replacement/1012719, Pump, Tandem Mobi, Control-IQ 7.6.0.3, Medicare/1013501, Pump, Tandem Mobi, Control-IQ 7.7/1013655, Pump, Tandem Mobi, Control-IQ, 7.7, Replacement/1013656, Pump, Tandem Mobi, Control-IQ 7.7, Medicare/1013700, Pharmacy Kit, Starter Pack, Tandem Mobi 7.7/1014081

  Insulin pump includes a vibration motor that gives tactile feedback for any alerts, alarms, or malfunctions. Pump may exhibit false vibration motor failure due to a software issue causing Malfunction 12: "Pump cannot operate, the mobile app can no longer receive data from the pump. Insulin delivery and any active CGM Sessions have been stopped", which could result in hyperglycemia.