Drug-delivery device recalls: infusion pumps 3.4x more likely to be Class I

When the FDA initiates or monitors a medical device recall, it classifies the event under one of three categories based on the severity of the clinical risk. Class I recalls are the most urgent, indicating a reasonable probability that exposure to or use of the device will cause serious adverse health consequences or death. Across the entire FDA medical device enforcement database, Class I actions represent a small minority of events—just 9.1% of the 39,430 total records.

However, a systematic analysis of the drug-delivery-device cohort—which includes large-volume infusion pumps, syringe drivers, insulin infusion pumps, patient-controlled analgesia (PCA) pumps, and autoinjectors—reveals a starkly different risk profile. Within this drug-delivery cohort, which accounts for 614 enforcement records, Class I recalls make up 30.8% of all events (189 reports). This means that a drug-delivery device recall is approximately 3.4 times more likely to be classified as Class I compared to the medical device industry average of 9.1%.

This high concentration of Class I classifications highlights the safety-critical nature of active drug-delivery hardware. While a malfunction in a diagnostic imaging system or an orthopedic implant might trigger a Class II corrective action, an error in an infusion pump directly threatens the patient's immediate physiology. An interruption in the flow of a vasoactive drug can cause rapid cardiovascular collapse, and a programming error that leads to an overdose of insulin or opioids can be fatal.

For medical device manufacturers, quality assurance teams, hospital pharmacy directors, and biomedical engineers, understanding these recall trends and failure modes is essential for improving design control, managing inventory risk, and ensuring patient safety.

---

How concentrated are Class I recalls in drug-delivery devices versus all devices?

To understand the unique risk profile of drug-delivery hardware, we must compare the distribution of recall classifications within the drug-delivery cohort against the baseline of all medical devices.

The FDA medical device enforcement database contains 39,430 total records spanning 2001 to 2026. The baseline distribution across all medical devices is as follows:

• Class II (Moderate Risk): 34,828 records (88.33%) — Exposure may cause temporary or medically reversible adverse health consequences.
• Class I (High Risk): 3,576 records (9.07%) — Reasonable probability of serious adverse health consequences or death.
• Class III (Low Risk): 1,025 records (2.60%) — Exposure is not likely to cause adverse health consequences.
• Not Yet Classified: 1 record (<0.01%)

Now, let's compare this baseline directly to the 614 drug-delivery device enforcement records identified within the same dataset:

Data Source: openFDA Device Enforcement Database (2001–2026).

This data shows that Class I recalls represent nearly a third of all drug-delivery recalls, compared to less than one-tenth of recalls for the broader medical device industry.

This discrepancy is driven by the pharmacokinetics and clinical applications of intravenous and subcutaneous drug delivery. Active delivery hardware is one of the few device categories where a temporary malfunction can immediately lead to life-threatening conditions. In contrast, many Class II recalls in other categories involve software updates for diagnostic tools, minor labeling errors on surgical instruments, or packaging defects on non-sterile items where the clinical impact is delayed or mitigated by clinician intervention.

---

Which firms recall the most infusion and insulin-delivery hardware?

Within the same 614-record drug-delivery enforcement cohort, we can identify the manufacturers with the largest recall footprints. The table below details the top recalling firms, with legal-entity variants consolidated under their parent corporate names:

Data Source: openFDA Device Enforcement Database (2001–2026). Legal-entity variants (for example, "Baxter Healthcare Corporation" / "Baxter Healthcare Corp.") and post-acquisition brand families (Hospira and Smiths Medical are now part of ICU Medical; Carefusion is now part of BD) are consolidated. A parallel keyword scan of the broader openFDA device recall listing (58,687 records) yields a 1,044-record delivery-device cohort with the same firm leaders, confirming the ranking is stable across both FDA datasets.

The leaderboard is dominated by two distinct device populations: the hospital infusion-pump market (Baxter, Hospira/ICU Medical, B. Braun, Carefusion/BD) and the personal insulin-pump market (Medtronic MiniMed). Notably, Medtronic MiniMed's footprint here is enlarged by a large multi-model action affecting Paradigm, 600-series, and 700-series insulin pumps over unintended over-delivery risk—a reminder that insulin-pump recalls, like MAUDE adverse events, carry Class I weight because insulin dosing errors can be life-threatening.

The corporate integration history of these companies explains their consolidated footprint. Hospira's infusion-pump portfolio, including the Plum and Symbiq lines, was acquired by ICU Medical in 2017, so many older Hospira records now sit alongside ICU Medical's own Plum and LifeCare actions. Carefusion 303 was spun out from Cardinal Health and acquired by Becton Dickinson (BD) in 2015; the Alaris line has since been the subject of repeated Class I actions and remains a focus of BD's remediation program.

It is important to interpret these numbers with appropriate context. A high recall count does not automatically indicate that a manufacturer has poor quality systems. Several structural factors influence these totals:

1. Installed Base Size: The companies at the top of the list are the market leaders. They have millions of pumps active in hospitals worldwide. With a larger installed base, even a minor component failure rate will generate more individual recall records.
2. Multi-Lot Reporting Structure: The FDA database logs recalls by individual product/lot records. If a manufacturer recalls a single pump model but files separate notifications for ten different affected lots, serial numbers, or sub-components, this generates ten separate records in the database. Consequently, these counts reflect individual database records rather than unique corporate recall events.
3. Rigorous Compliance Monitoring: Companies with mature quality systems and close relationships with the FDA are more likely to proactively log and report issues, generating recalls for software patches or labeling corrections that other firms might resolve less transparently.

To see how these recall trends compare to the drug industry, read our companion piece, drug recalls by the numbers: FDA enforcement analysis.

---

What actually fails: dose-delivery error, sterility, or something else?

To help design engineering and quality assurance teams build safer hardware, we can categorize the root causes documented in the openFDA reason_for_recall text. The categories below are drawn from a keyword scan of all 614 enforcement records plus the parallel 1,044-record recall listing; because the reason text is free-form, the boundaries between categories overlap and the taxonomy is illustrative rather than a precise statistical split. Even so, one pattern is unambiguous: dose-delivery and flow-accuracy failures are the dominant theme, appearing (alone or alongside another cause) in the large majority of records. The failure modes fall into five categories:

1. Dose-delivery and flow-accuracy errors (the dominant theme)

This is the largest and clinically most dangerous category. It includes any failure that results in the patient receiving more or less drug than programmed:

• Infusion Inaccuracy: Hardware wear, tubing degradation, or calibration drift that causes the pump to deliver fluid outside the standard +/-5% flow-accuracy tolerance (documented recalls have cited drift well beyond that window).
• Unintended Siphoning / Free Flow: A failure of the pump's slide clamp or anti-free-flow valve that allows the drug to flow under gravity directly into the patient, leading to massive overdoses.
• Occlusion Detection Failures: The pump failing to alarm when the infusion line is blocked, leading to drug under-delivery, or conversely, generating false occlusion alarms that interrupt critical therapies.
• Backcheck Valve Failures: Fails that allow a primary infusion to backflow into a secondary line, delaying the delivery of secondary medications (like antibiotics or chemotherapy).

Understanding the mechanical engineering of these pumps explains why these failures occur. Hospital large-volume pumps typically utilize either linear peristaltic or rotary peristaltic mechanism, or a cassette-based volumetric mechanism (such as ICU Medical's Plum system). Linear peristaltic pumps use a series of moving fingers to squeeze the administration set tubing in a wave-like motion, forcing fluid forward. Over time, the plastic tubing undergoes "cold flow" or "creep"—a permanent deformation of the elastomer under repetitive stress. This deformation changes the internal diameter of the tubing, causing flow rates to drift beyond the +/-5% accuracy window that IEC 60601-2-24 infusion-pump standards target. Volumetric cassette systems, while more precise because they utilize a rigid plastic chamber with active valves, are highly vulnerable to microscopic air bubbles and backpressure anomalies, which can trigger frequent false alarms or valve leaks.

2. Physical, structural, and material defects

These failures involve the physical housing and mechanical interfaces of the device:

• Cracking and Material Degradation: Plastics cracking due to exposure to harsh hospital cleaning chemicals, leading to fluid ingress and electrical shorts.
• Tubing and Luer Breaks: Cracks or splits in the plastic administration sets, leading to leaks, drug loss, and potential air embolisms.
• Door Latch Malfunctions: Wear on the mechanism that holds the pump door closed, preventing proper occlusion pressure and sometimes triggering free-flow events.

Hospital disinfectant protocols represent a major environmental stressor for medical plastics. In an effort to combat healthcare-associated infections (HAIs), hospitals utilize aggressive chemical cleaning agents containing quaternary ammonium compounds, sodium hypochlorite (bleach), or high-concentration isopropyl alcohol. Many legacy pumps were constructed using polycarbonates or ABS (acrylonitrile butadiene styrene) plastics. Exposure to these disinfectants causes "environmental stress cracking"—a chemical attack that breaks polymer chains and creates micro-cracks under mechanical load. When these cracks develop in the pump casing, door hinges, or latch hooks, they prevent the pump door from applying uniform pressure to the administration set, leading to flow inaccuracies or mechanical failures.

3. Software and electronic anomalies

Modern infusion pumps are complex computers. Software issues represent a growing proportion of recent recalls:

• Firmware Crashes: Unexpected system freezes or "error screens" that halt the pump, requiring a hard reset.
• Dose Error Reduction System (DERS) Glitches: Corrupted drug libraries or failures in the software that checks programmed doses against safety limits.
• Battery Management Errors: Failures in the battery monitoring software that cause the pump to shut down without warning, despite indicating remaining charge.

The integration of Dose Error Reduction Systems (DERS)—commonly known as drug libraries—is the primary software defense against medication errors. DERS software allows hospitals to pre-program "soft limits" (which warn clinicians but can be overridden) and "hard limits" (which halt the pump and cannot be overridden) for infusion rates and drug concentrations. If the pump's internal memory or drug library file becomes corrupted, the DERS system may fail to enforce these limits, leaving the patient vulnerable to programming errors. Additionally, modern connected pumps frequently communicate with electronic health records (EHRs) via hospital Wi-Fi. A network connection timeout or buffer overflow in the pump's wireless module can freeze the primary processor, forcing the pump to halt infusion and trigger an alarm.

4. Lack of sterility / contamination

While less common for the pump hardware itself, sterility recalls frequently affect the disposable administration sets, syringes, and connectors that come into contact with the drug pathway. These are typically Class II actions driven by manufacturing line contamination or packaging seal failures.

5. Fire, shock, and electrical hazards

Issues with AC power adapters, internal power supplies, or batteries overheating. These are a smaller but high-severity category, because a pump that loses power mid-infusion of a life-sustaining drug can cause immediate harm independent of any dosing error.

For a detailed look at how to design and validate devices to prevent these physical and human-factors failures, refer to our guide on combination product human factors validation.

---

What do recent Baxter and BD Class I infusion-pump recalls tell us?

To illustrate how these abstract database trends manifest in clinical practice, we can examine the major Class I infusion-pump actions initiated or expanded in 2025. Together they show how dose-delivery, software, and hardware failure modes converge on the same device category.

1. Baxter Novum IQ — under/over-infusion (July 2025, Class I)

On July 22, 2025, the FDA issued an early alert for the Baxter Novum IQ large-volume infusion pump after Baxter reported 79 serious injuries and 2 deaths associated with the issue as of June 27, 2025. The problem: under certain conditions—particularly when the infusion rate is changed after the pump has been running—the pump can under-deliver, over-deliver, or stop delivering medication entirely. The FDA and Baxter advised providers to change the IV administration set or switch pumps at the first safe opportunity. This is the classic dose-delivery failure that drives the high Class I concentration in the cohort, and the reported harm (injuries and deaths) is exactly what a Class I classification is designed to flag.

2. Baxter Novum IQ — software anomalies, Z-2333-2025 (August 2025, Class I)

Separately, on August 4, 2025, Baxter issued an Urgent Medical Device Correction (FDA recall Z-2333-2025) for the Novum IQ Large Volume Pump (LVP) and Syringe Pump (SP) after identifying software anomalies that may result in a blank Run screen (LVP and SP) and/or a false motor-movement system error (SP only). The FDA released its early alert on August 15, 2025. Because a blank Run screen during a critical infusion can mask whether the pump is delivering therapy, the FDA classified the correction as Class I even though no removal from the field was required.

3. BD Alaris Pump Module Model 8100 (July–September 2025, Class I)

Becton Dickinson (BD) initiated a Class I voluntary recall of the Alaris Pump Module Model 8100 on July 8, 2025, expanded it on July 17, 2025, and expanded it again on September 12, 2025 to add 15 additional impacted pump infusion sets and new corrective actions. The core issue was pump-performance variation—delivery behavior that, under certain use cases with specific compatible infusion sets, differed from the performance described in the user manual and could affect infusion delivery. BD separately identified a keypad-lifting concern on the Model 8100 that could leave one or more keys unresponsive. The Alaris saga illustrates how a single modular platform can generate overlapping Class I actions across software, mechanical, and consumable-interface failure modes.

---

Is drug-delivery-device recall activity rising or falling (2018-2026)?

Recall activity is not static. It responds to regulatory cycles, technology introductions, and industry-wide supply chain stresses.

Below is the trend of drug-delivery-device recalls by initiation year from 2018 through mid-July 2026:

Year  | Enforcement records
2018  | 18  [===]
2019  | 65  [==========]
2020  | 75  [============]
2021  | 24  [====]
2022  | 26  [====]
2023  | 36  [======]
2024  | 65  [==========]
2025  | 48  [========]
2026* | 19  [===]
(*2026 is partial-year data through mid-July)

The data shows two distinct waves:

1. The 2019–2020 Peak: Driven by supply-chain disruptions during the COVID-19 pandemic, which forced manufacturers to utilize alternative component suppliers, combined with the rapid deployment of emergency-use infusion pumps in temporary intensive-care wards.
2. The 2024–2025 Rebound: After a quieter 2021–2023 stretch, recall activity climbed again in 2024 (65 records) and stayed elevated in 2025 (48), reflecting intensified FDA enforcement and software-remediation demands for connected pump systems—including the Baxter Novum IQ and BD Alaris Class I actions detailed above.

---

What should infusion-pharmacy and manufacturing teams do with this?

The high rate of Class I recalls in the drug-delivery category demands proactive risk-mitigation strategies from both the manufacturers who build these devices and the clinical teams who operate them.

Recommendations for Device Manufacturers

1. Chemical-Resistant Material Selection: Design housing plastics to withstand the aggressive chemical cleaning protocols used in modern hospitals. Standard polycarbonates often degrade when exposed to quaternary ammonium compounds or isopropyl alcohol; manufacturers should transition to advanced polymer blends, such as copolyesters or polyetheretherketone (PEEK).
2. Robust Software Fault-Tolerance: Implement independent watchdog microcontrollers that can monitor the primary processor and safely shut down the pump (or sound an alarm) if the main software freezes.
3. Advanced Human-Factors Testing: Prioritize human-factors testing for tubing loading and line setup. If a pump can be loaded incorrectly in a way that bypasses the anti-free-flow mechanisms, it represents a design vulnerability that must be corrected. For more on human factors, read our guide on combination product human factors validation.

Recommendations for Infusion Pharmacies and Quality Teams

1. Verify FDA Recall Classifications Proactively: Do not rely solely on manufacturer notifications, which can sometimes be delayed or downplayed. Establish a systematic workflow to monitor the FDA Medical Device Recall database weekly. For details on setting up a triage workflow, see our guide on FDA drug recall lookup and pharmacy triage.
2. Implement Dual-Control Verification for High-Alert Infusions: Because programming errors are a leading clinical failure mode, enforce independent double-checks for vasoactive, anesthetic, and opioid infusions.
3. Manage Component Compatibility: Ensure that all disposable administration sets, connectors, and syringes are validated for the specific pump model in use. Using off-brand or non-validated consumables to cut costs can compromise the pump's occlusion-detection and flow-accuracy mechanisms.
4. Supply Chain Redundancy: Recalls of infusion sets can cause sudden shortages, threatening clinical continuity. Establish relationships with alternative suppliers and maintain a reserve of validated manual delivery sets. For a broader analysis of supply chain continuity, see our article on sterile injectable shortages and generic capacity.

---

Frequently Asked Questions

What makes a device recall Class I versus Class II or III?

The FDA classifies recalls based on clinical severity. A Class I recall indicates a reasonable probability that the use of or exposure to the device will cause serious adverse health consequences or death. A Class II recall indicates that use may cause temporary or medically reversible consequences. A Class III recall indicates that use is not likely to cause adverse health consequences.

Why are infusion-pump recalls so often Class I?

Infusion pumps deliver critical, high-alert medications directly into the patient's circulatory system. If a pump malfunctions—causing an over-infusion of an opioid or a sudden interruption in a life-sustaining vasopressor—the clinical consequences are immediate and severe, justifying the FDA's highest-risk classification.

What is the difference between a MAUDE adverse-event report and a recall?

A MAUDE report is a passive adverse-event submission detailing a specific incident where a device malfunctioned or caused harm. A recall is a formal corrective action or removal initiated by the manufacturer or mandated by the FDA to address a systemic defect affecting an entire product line or lot.

Which infusion-pump brands have had the most Class I recalls?

The brands with the largest recall footprint in the database are the market leaders with the largest installed bases, including Baxter's Spectrum and Colleague lines, ICU Medical's Plum series, and Carefusion's Alaris platform.

Where can I look up whether my infusion pump has been recalled?

Providers can search the official FDA Medical Device Recalls database using the device name, model number, or manufacturer. The openFDA Device Enforcement API also provides queryable access to these records for integration into hospital inventory systems.

---

Sources

1. FDA Medical Device Recalls Database. Center for Devices and Radiological Health (CDRH). FDA Recalls Search
2. openFDA Device Enforcement Reports API. U.S. Food and Drug Administration. openFDA Device Enforcement JSON API
3. U.S. Food and Drug Administration (FDA). Infusion Pumps Correction — Baxter Issues Correction for Novum IQ Infusion Pumps. FDA Recall Notice
4. American Hospital Association (AHA) News. FDA Alerts on Baxter Infusion Pump Issue. AHA Advisory
5. Becton, Dickinson and Company (BD). BD Provides Update on Voluntary Recall of Certain BD Alaris Pump Infusion Sets (September 12, 2025). BD Press Release
6. MedTech Dive. Baxter recalls certain Novum pumps over issues tied to 79 injuries, 2 deaths. MedTech Dive Coverage
7. U.S. Code of Federal Regulations: 21 CFR Part 7. Recalls — Policy and Guidelines. CFR Part 7