Mission
To discover and deliver innovative medicines and solutions that address complex health issues and enhance people’s lives.
AbbVie understands the critical impact of cybersecurity on our medical device products and thus is dedicated to safeguarding against possible vulnerabilities that might compromise the integrity, safety, and security of our medical devices, as well as the privacy of our patients and customers.
With the ever-evolving threat of cyberattacks on medical devices, we have implemented a coordinated product disclosure process aimed at mitigating cybersecurity risks from new and emerging threats, allowing us to consistently enhance the security of our products.
We understand the importance of working together with security researchers, patients, and our customers to identify and evaluate potential new vulnerabilities within our products.
Scope
The scope of our cybersecurity coordinated product disclosure reporting process includes Medical Devices and Software as a Medical Device. It is not meant for technical support information on AbbVie’s products or for reporting Adverse Events or Product Quality Complaints. For these matters, please call AbbVie at 844-663-3742 or visit https://www.abbviemedinfo.com/submit-inquiry.
HOW TO SUBMIT
If you have identified a potential vulnerability related to an AbbVie Medical Device or Software as a Medical Device, we ask you to fill in and submit the following form:
Upon submission of a vulnerability, AbbVie will:
- Acknowledge receipt of the submission within 5 business days.
- Conduct a thorough evaluation of the reported vulnerability’s potential impact to decide on appropriate actions.
- Verify and attempt to reproduce the vulnerability, potentially reaching out to you for support during this phase, and then present a summary of findings post-evaluation.
- If AbbVie determines that disclosure is warranted, we will publish a notification on this page and report it to relevant external parties per AbbVie’s procedures.
Notice: By submitting your findings through this process, you agree that your submission will be governed by AbbVie’s Privacy Statement and Terms of Use. Your submission will be considered non-proprietary and non-confidential, and AbbVie will be permitted to use the information in any manner, in whole or in part, without restriction. Additionally, you acknowledge that submitting such information does not create any rights for you or impose any obligations on AbbVie.
SECURITY ADVISORY
As they become available, below you’ll find a list of all the advisory information regarding security events and incidents and their potential impact on AbbVie products.