Security firm MedSec has discovered vulnerabilities in St. Jude’s implantable cardiac devices that could cause these devices to malfunction. These malfunctions could lead to increased heart rates or cause the battery to drain at a much greater rate, which could cause physical harm to the target. MedSec shared this information with the Muddy Waters Research financial firm who has shorted the stock based on this information. According to MedSec these vulnerabilities are related to the Merlin@home device, which is used to communicate with the cardiac device and then transmit data back to St. Judge Medical’s network.
Source: https://www.bleepingcomputer.com/news/business/medsec-and-muddy-waters-partnership-may-put-profit-over-responsible-disclosure/