Millions of Americans place their lives in the hands of medical devices every day – intricate machines like pacemakers, infusion pumps, and vigilant patient monitors. But a hidden danger lurks within some of this critical equipment, a threat originating from overseas.
In early 2025, a chilling warning was issued jointly by the Food and Drug Administration and the Cybersecurity and Infrastructure Security Agency. Patient monitors manufactured by Contec Medical Systems, a Chinese company, were found to contain a concealed backdoor. These devices, prevalent in hospitals nationwide, were capable of transmitting sensitive patient data directly to a designated IP address within China.
The implications were far more sinister than simple data collection. This backdoor wasn’t just a pathway for information; it allowed for remote code execution, meaning an adversary could potentially manipulate vital signs displayed to doctors and nurses, leading to dangerously flawed clinical decisions.
Worse still, there was no fix. No software patch could close this vulnerability. For those behind it, this wasn’t a flaw – it was an intentional feature. China’s 2017 National Intelligence Law compels all Chinese companies to cooperate with state intelligence operations, effectively granting the government unfettered access.
The risk extends beyond mere data breaches. Dependence on a foreign supplier, particularly one linked to an adversarial nation, creates a precarious situation. State subsidies allow these companies to undercut American competitors, and the threat of sudden supply disruptions, as witnessed during the COVID-19 pandemic, looms large.
Texas recognized the urgency and refused to wait for federal action. While Washington struggled with political gridlock, the Lone Star State took decisive steps. Governor Greg Abbott banned technologies affiliated with the Chinese Communist Party from state government systems and established the Texas Cyber Command to proactively identify and neutralize foreign threats.
The governor later expanded the list of prohibited technologies to include 26 additional China-linked companies, encompassing both hardware manufacturers and artificial intelligence platforms with direct ties to the CCP. Texas Attorney General Ken Paxton has actively pursued legal action against these firms operating within the state.
This stance resonates with the public. Texans understand that national security isn’t confined to borders or battlefields; it extends to the very devices monitoring the health of their loved ones. The concern is not abstract; it’s deeply personal.
Existing legal tools can be leveraged to further strengthen these protections. The focus now is on extending these safeguards directly into state health care procurement processes. Texas Republicans are leading the charge, with a letter signed by 53 legislators calling for concrete measures.
These measures include directing state health agencies to prioritize medical devices from companies not linked to the CCP, establishing a thorough review of existing contracts and equipment for vulnerabilities, and incentivizing the production of American-made medical technology through grants and preferential treatment.
For two of us, with backgrounds as an intelligence officer and a physician in the U.S. Army, this issue is profoundly personal. Years spent analyzing national security threats have underscored the critical importance of protecting our infrastructure, especially within healthcare.
No patient should have their medical data flowing to a server in China, nor should their care be jeopardized or held hostage by a foreign power. No hospital should be a single firmware update away from undetected interference. And no state should leave its medical infrastructure vulnerable to exploitation.
Texas is demonstrating a path forward, armed with a clear framework, strong public support, and unwavering resolve. The time to act is now, before a crisis forces a reactive response. The nation is watching, and Texas is prepared to lead by example.
