Neuromodulatory hacking: a review of the technology and security risks of spinal cord stimulation

Spinal cord stimulation (SCS) is a neuromodulatory technique used to relieve chronic pain. Previous instances of malicious remote control of implantable medical devices, including insulin delivery pumps and implantable cardiac defibrillators, have been documented. Though no cases of neuromodulatory hacking have been recorded outside of the academic setting, an understanding of SCS technology and the possible consequences of manipulation is important in promoting safety.

We review the components and implantation protocol of a SCS system, the functionality and technological specifications for SCS systems in the global market based on their device manuals, and patient- and clinician-specific adjustable factors. Furthermore, we assess documented instances of implantable medical device hacking and speculate on the potential harms of targeting SCS systems.

SCS systems from Abbott Laboratories, Boston Scientific, Medtronic, and Nevro have unique functionality and technological specifications. Six parameters in device control can potentially be targeted and elicit various harms, including loss of therapeutic effect, accelerated battery drainage, paresthesia in unintended locations, muscle weakness or dysfunction, tissue burn, and electrical shock.

Based on the history of implantable medical device hacking, SCS systems may also be susceptible to manipulation. As the prevalence of SCS use increases and SCS systems continuously evolve in the direction of wireless control and compatibility with mobile devices, appropriate measures should be taken by manufacturers and governmental agencies to ensure safety.