From Minneapolis Star Tribune:

I Am The Cavalry’s Beau Woods spoke to the Minneapolis Star Tribune about how medical-technology companies should respond to finding security vulnerabilities at some point in the supply chain. 

Communication in the medical device supply chain ought to include newly discovered security vulnerabilities,” said Beau Woods, CEO of information security consulting firm Stratigos Security. “In theory, when any of your supply chain finds out about an issue like that, they are supposed to tell you. In some cases they do, in some cases they delay, and sometimes they don’t bother,” Woods said.