|
Arc-one solutions received information regarding regulated software application (rsa), version 2.0 (bk200512).Specifically, an issue related to importing blood products into rsa 2.0 from a blood center's own facility, and the ability to ship these products to customers for use.On (b)(6)2024, arc-one received a database change request from oneblood to add draw information to eight units that were imported from one of their own facilities.Investigation revealed that these units were collected, labeled and shipped manually by oneblood during system downtime as a result of their cybersecurity incident.Upon system recovery, oneblood staff incorrectly imported instead of creating the products into rsa 2.0 and ultimately shipped the products in the application.Arc-one has confirmed that the eight units were appropriately labeled, had acceptable test results, and the donors did not have a deferred status.The import function in the rsa 2.0 application is intended to be used to receive blood products from an external facility, in which case all manufacturing and donor eligibility activity have been completed, and the product is ready for shipping.Rsa 2.0 should not allow for products to be imported from within the blood center's facility and potentially bypass confirmation of associated testing results, donor status, or labeling verification prior to shipping.Regulated software application (rsa), version 2.0 (bk200512) is used by a single corporate entity.This single entity was notified of the issue on (b)(6)2024, at which time it was confirmed that the eight units for which this issue was observed were all confirmed to have satisfactory test results and no donor deferrals.Therefore, no safety issues have been identified related to this occurrence.Version 2.0.4.0 of the regulated software application (rsa) (bk200512) was ready for release to the customer on (b)(6) 2024, and formally promoted to the customer production environment on (b)(6) 2025.This release included a fix to imports process in the inventory control functionality adding a restriction to prevent a blood center from being able to import products from their own facility.To date, no safety issues have been identified related to this occurrence.Note: this is a resubmission of an mdr originally submitted on (b)(6)2024 (attached).This mdr is being resubmitted because it has recently come to arc-one's attention that the original submission of (b)(6)2024, and the subsequent follow up report #1, are not reflected in the maude database, thus arc-one is ensuring that each are being refiled in the appropriate file format in accordance with fda requirements.
|