When DePuy Orthopaedics, the joint-replacement arm of Johnson & Johnson, recalled its Articular Surface Replacement (ASR) hip systems worldwide on 24 August 2010, the gap between the device’s promise and its harm was already legible in national arthroplasty registries: the ASR had been sold as a durable, large-diameter metal-on-metal joint suited to younger, more active patients, yet by the time of recall the company itself conceded a five-year revision rate near 13 percent — roughly one in eight — against an expected figure on the order of 5 percent, and independent registry follow-up would push the early-failure rate toward 40 percent within six years. Roughly 93,000 patients across the world had received one.
The mechanism was metallurgical, not surgical. The ASR paired a cobalt-chromium ball against a cobalt-chromium cup; in motion the two surfaces shed microscopic metal debris and released cobalt and chromium ions into surrounding tissue and the bloodstream. The local result was metallosis and adverse reaction to metal debris — soft-tissue necrosis, fluid-filled pseudotumors, and bone destruction that frequently demanded a second, more difficult operation. The systemic burden of circulating cobalt was linked in the literature to cardiac, neurological, and thyroid effects. The very design choice marketed as an advantage — a large bearing for stability — increased the surface area generating that debris, particularly when the shallow cup was implanted at a steep angle.
DePuy did not act on the first signal. The Australian Orthopaedic Association National Joint Replacement Registry identified an elevated revision rate for the ASR resurfacing system in 2007 and for the ASR XL acetabular system the following year, and conveyed the finding to the company in a series of reports. DePuy withdrew the ASR from Australia in 2009 citing “commercial reasons,” then continued selling it elsewhere until the 2010 global recall. In the United States, the ASR XL had reached market in 2008 through the FDA’s 510(k) clearance route — which permits sale on the basis of similarity to existing devices rather than fresh clinical proof of safety — while the resurfacing version was never approved for U.S. use at all. Litigation, not pre-market review, fixed the bill: J&J’s November 2013 U.S. settlement framework began at roughly $2.5 billion for about 8,000 revision claims and, with later expansions, grew past $4 billion as more than 11,000 plaintiffs came forward.
When Medtronic Inc. suspended distribution of the Sprint Fidelis defibrillator lead on 15 October 2007, the gap between what the device promised and what it delivered was already measured in patients shocked awake by a machine guarding a heart that never faltered — and in others whose hearts stopped while a fractured wire stood silent. The Fidelis (models 6930, 6931, 6948, 6949) had been marketed since September 2004 as a refinement of an unglamorous component: the insulated wire that carries the sensing and high-voltage shock between an implantable cardioverter-defibrillator and the heart muscle. Its selling proposition was caliber. At 6.6 French — roughly 2.2 millimeters — it was the thinnest defibrillation lead on the market, slimmer than Medtronic’s own proven Sprint Quattro and easier to thread into the right ventricle. Thinner was sold as better. Thinner was the defect.
The harm took two mirror-image forms. When a Fidelis conductor fractured — and the thin, integrated cables fractured at higher-than-baseline rates near the can and the anchor sleeve — the lead generated electrical noise the ICD misread as a lethal arrhythmia, and the device did what it was built to do: it delivered a 30-to-40-joule shock into a fully conscious patient, sometimes dozens of times in a night. The opposite failure was worse. A fractured conductor could also break the circuit, so that when the patient genuinely arrested, the defibrillator could not deliver the therapy that was its entire reason to exist. Medtronic’s own analysis projected roughly 2.3 percent of leads fracturing within 30 months; independent center series ran far higher, near 3.75 percent per year against 0.6 percent for comparison leads. At least 13 deaths were ultimately linked to the lead.
Medtronic halted sales and recalled all unimplanted Fidelis leads; the FDA designated it Class I, its most serious category, reserved for products that may cause serious injury or death. But the defining feature was what did not happen: the roughly 268,000 leads already inside patients’ chests were largely left there. A defibrillator lead becomes encased in scar and bonded to the heart wall within months, and extraction can tear the vena cava or ventricle and kill the patient on the table. The recall could not undo itself. Patients were handed a probabilistic dilemma — leave a wire with a known, accelerating failure rate, or accept the lethal risk of pulling it — and a management tail that fell heavily on Medicare. A 2010 settlement of roughly 8,100 lawsuits for $268 million closed the litigation; it did not close the chests.
When Guidant Corporation issued its physician advisory on June 17, 2005 and the FDA classified it a Class I recall — the most serious category, reserved for defects with a reasonable probability of serious injury or death — the gap between the device’s promise and its performance had already been measured in a single funeral. The Ventak Prizm 2 DR (Model 1861) was an implantable cardioverter-defibrillator, a machine whose entire purpose is to deliver a life-saving shock at the instant a patient’s heart fibrillates. Guidant had known since February 2002 that a fraction of these units were prone to internal electrical arcing — a short-circuit across degraded insulation that could render the device inert exactly when it was called upon to fire. The company quietly re-engineered the device in November 2002 to fix the flaw, then told the FDA the change did not affect safety or effectiveness, and continued shipping the older, defect-prone inventory it had already built.
The concealed defect became a body on March 14, 2005, when Joshua Oukrop, a 21-year-old college student from Grand Rapids, Minnesota, with hypertrophic cardiomyopathy, collapsed and died on a mountain-biking trip in Utah. His implanted Prizm 2 DR had short-circuited and failed to shock him. His electrophysiologists, Dr. Robert Hauser and Dr. Barry Maron of the Minneapolis Heart Institute, asked Guidant what had happened; the company disclosed that it knew of the failure mode but had no plan to warn physicians. Hauser and Maron took the case to The New York Times, whose reporter Barry Meier published it on May 24, 2005. Public exposure, not the manufacturer’s conscience, forced the recall three days later.
The reckoning was not regulatory but criminal. After a four-year investigation, the U.S. Department of Justice charged Guidant — by then a subsidiary of Boston Scientific, which had acquired it for roughly $27 billion in April 2006 — with making a materially false statement to the FDA about the Prizm 2 DR and failing to report a “correction” to its Contak Renewal defibrillators. Guidant pleaded guilty, and on January 12, 2011 U.S. District Judge Donovan W. Frank in St. Paul ordered it to pay more than $296 million in fines and forfeiture and serve three years of supervised probation — at the time the largest criminal penalty ever imposed for violating the Food, Drug, and Cosmetic Act. The episode became the foundational case for the principle that withholding a known device defect from regulators is not a paperwork lapse but a prosecutable crime.
When St. Jude Medical stopped selling its Riata and Riata ST defibrillator leads in December 2010 — eleven months before the FDA would classify the action as a Class I recall on 28 November 2011 — the gap between the device’s premise and its behavior was already a matter of cardiac geometry: a lead engineered to carry high-voltage shocks reliably for the life of an implantable cardioverter-defibrillator (ICD) was instead destroying itself from the inside out. The silicone insulation that sheathed the inner cabling abraded against the conductors it was meant to protect, and the high-voltage wires worked their way through the insulation and externalized — poked out of the lead body — inside the patient’s veins and heart. By the time sales stopped, more than 227,000 Riata-family leads had been distributed worldwide, roughly 79,000 of them still implanted in living U.S. patients, each one a wire that could fail to deliver a defibrillation shock at the one moment it was needed.
The danger of the Riata defect was not that it failed loudly but that it failed silently and electrically. A lead with externalized conductors could pass a routine pacing check on a clinic telemetry interrogation and still be incapable of completing a defibrillation circuit when a patient’s heart fibrillated. The mechanism was an electrical short between the superior-vena-cava and right-ventricular shock coils — the kind of fault that does not announce itself until the device must actually defibrillate, and then does not. Imaging studies later found externalized conductors in roughly 19 to 27 percent of Riata leads examined, with the thicker 8 French models worse than the 7 French Riata ST, and meta-analysis tied externalization to a more than six-fold rise in electrical abnormality.
The Riata story is less a tale of a single catastrophic flaw than of how long a known reliability problem can travel before regulation catches it. The leads had been on the market since 2001–2002; St. Jude withdrew them commercially in December 2010 in favor of its newer Durata lead, which carried an Optim co-polymer coating the company argued would resist abrasion. Only in late 2011 — after a Minneapolis Heart Institute cardiologist, Dr. Robert Hauser, mined the FDA’s MAUDE adverse-event database and published a series linking the Riata family to roughly 22 deaths from high-voltage shorting — did St. Jude issue the formal physician advisory the FDA then classified as Class I. St. Jude disputed Hauser’s death count and demanded a retraction; the underlying signal stood. As with Medtronic’s earlier Sprint Fidelis leads, the medical response was overwhelmingly to monitor in place rather than extract, because pulling a scarred-in lead from the heart carries its own mortal risk: at least two of the deaths in the recall record came not from the defect but from the extraction.
When France’s medical-safety agency AFSSAPS suspended Poly Implant Prothèse’s silicone breast implants and forced the company into liquidation in March 2010, the gap between what founder Jean-Claude Mas had sold and what he had actually manufactured had been hidden for nearly a decade: since roughly 2001, PIP had quietly filled most of its implants with an in-house industrial-grade silicone — a gel built from chemicals such as Baysilone, Silopren, and Rhodorsil intended for fuel additives and rubber, not the medical-grade material on its certificates. The substitution cut the gel cost by close to 90 percent, from on the order of €35 per litre to roughly €5. The legend PIP traded on — a cut-price, CE-marked, third-largest implant maker in the world — was, for most of the prostheses it shipped, a fraud the company kept two sets of records to conceal.
The harm was mechanical and then systemic. The unapproved gel sat in shells that ruptured and leaked at rates independent reviews placed between 5 and 11 percent, against under 1 percent for approved implants — an elevation on the order of fivefold. When the shells failed, the industrial filler bled into surrounding tissue, provoking inflammation, lymph-node reactions, and repeat surgery. By the end of 2011, regulators were tracking roughly twenty cancer cases among PIP recipients and one death attributed to anaplastic large-cell lymphoma, though no causal link to the silicone was ever established. An estimated 300,000 women in some 65 countries carried the devices, many fitted for breast reconstruction after cancer.
Recall did not mean retrieval. Pulling the product and liquidating the maker left hundreds of thousands of devices inside bodies; on 23 December 2011 the French government went further than most and recommended that about 30,000 French women have the implants removed as a precaution. Criminal justice followed the bankruptcy: a Marseille court convicted Mas of aggravated fraud on 10 December 2013, sentencing him to four years in prison and a €75,000 fine and barring him from medicine and company management — upheld on appeal at Aix-en-Provence in May 2016. The deeper failure was the certification chain: notified body TÜV Rheinland had inspected PIP repeatedly between the late 1990s and 2010 without catching the swap, and in May 2021 the Paris Court of Appeal found it negligent and liable to victims. The scandal became the proximate fuel for the European Union’s 2017 Medical Device Regulation, the law written to close the door PIP had walked through.
When the U.S. Food and Drug Administration ordered Boston Scientific and Coloplast on April 16, 2019 to stop selling all surgical mesh intended for transvaginal repair of pelvic organ prolapse, the gap between the promise and the harm was already a settled scientific finding: the agency stated the manufacturers had “not demonstrated a reasonable assurance of safety and effectiveness,” having “failed to demonstrate an acceptable long-term benefit of these devices compared to transvaginal surgical tissue repair without the use of mesh.” The mesh had been sold for nearly two decades as a stronger, more durable fix for sagging pelvic organs. The controlled evidence showed it was no better than stitching native tissue — and considerably more dangerous.
The product was a knitted sheet of non-absorbable polypropylene, placed through the vagina to act as a hammock under a prolapsed bladder, uterus or rectum. Its central failure mode was that the implant did not stay inert. Over months and years the mesh contracted, hardened and eroded through the vaginal wall and into adjacent organs, producing a signature cluster of harms: chronic pelvic pain, dyspareunia (painful intercourse), bleeding, infection, urinary problems, organ perforation, and erosion that frequently could not be fully reversed because the mesh integrated into tissue and fragmented on removal. The FDA’s own reviews put serious complications well above the “rare” reassurance physicians had been given.
The devices reached the market not through clinical proof but through the 510(k) clearance pathway, which lets a manufacturer skip pre-market testing by claiming “substantial equivalence” to an existing product — in this case an older abdominal hernia mesh and the first transvaginal kits, each in turn cleared by pointing back to a predecessor. No randomized trial of safety and effectiveness was ever required to put these implants into women. The reckoning came in two channels at once. Litigation consolidated into one of the largest mass-tort proceedings in U.S. history — more than 100,000 lawsuits against Ethicon (Johnson & Johnson), Boston Scientific, American Medical Systems, C.R. Bard, Coloplast and others, resolved for upward of $8 billion. Regulation moved more slowly: a 2008 public-health notification, a blunt 2011 reversal (“not rare”), reclassification to Class III in January 2016, and finally the 2019 stop-sale order when no maker could produce the safety data the new class demanded. Transvaginal POP mesh became the textbook case of a permanent implant cleared without proof and withdrawn only after the evidence — and the bodies — caught up.
When Bayer announced on 20 July 2018 that it would stop selling Essure in the United States by year’s end, it framed the decision as a business matter — declining sales, a shrinking permanent-contraception market — and insisted, in writing, that “the benefit-risk profile of Essure has not changed” and that the device’s safety and efficacy were “demonstrated by an extensive body of research.” The gap between that claim and the lived record was already vast: by then the FDA had logged tens of thousands of adverse-event reports, a 2016 boxed warning sat on the label, an April 2018 order had restricted who could sell the device at all, and roughly 39,000 U.S. women would ultimately file claims describing perforated organs, coils that migrated into the abdomen, chronic pelvic pain, autoimmune reactions, and failed sterilizations. The wonder-device — sold as the only FDA-approved permanent birth control requiring no incision, no general anesthesia, and no hormones — was being withdrawn for “business reasons” precisely because the harm had made the business untenable.
Essure was a pair of nickel-titanium and stainless-steel microcoils wound with polyethylene terephthalate (PET) fibers. A clinician threaded one into each fallopian tube through the cervix; the PET fibers provoked a deliberate inflammatory response, and over roughly three months scar tissue was meant to occlude the tubes permanently. The premise was elegant and the marketing matched it: a fifteen-minute office procedure, immediate return to normal activity, “99.83% effective.” The same biology that produced occlusion, however, also produced the harm. Coils perforated the thin tubal wall; fragments and whole devices migrated into the pelvis and abdomen, sometimes requiring hysterectomy to retrieve; nickel-sensitive women reacted systemically; and the occlusion was incomplete often enough to yield unintended and ectopic pregnancies.
Conceptus Inc. won FDA premarket approval (PMA P020014) in November 2002 on the strength of two non-randomized pivotal trials with no comparison arm and incomplete long-term follow-up. Bayer acquired Conceptus in 2013 for roughly $1.1 billion, inheriting both the product and a rising tide of complaints. The reckoning came not from a recall but from data the manufacturer had not generated: patient registries, a mass Facebook group (“Essure Problems”) tens of thousands strong, an independent analyst’s mining of the FDA’s MAUDE database surfacing hundreds of reported fetal losses, and a congressman’s bill to revoke the approval. The FDA imposed a boxed warning and a mandatory postmarket study in 2016, restricted sales in 2018, and watched Bayer withdraw the device worldwide by 31 December 2018 — without ever recalling the coils already inside three-quarters of a million bodies. In August 2020 Bayer agreed to pay roughly $1.6 billion to resolve about 90 percent of the U.S. claims, while still denying the device was defective.
When C.R. Bard stopped selling its Recovery inferior vena cava filter in 2005, it did not recall the device or warn the roughly 34,000 patients carrying one inside the largest vein in the body; it replaced the Recovery with a cosmetically modified successor, the G2, and the gap between the promise and the harm was by then already documented in Bard’s own files. The Recovery was marketed as the first retrievable IVC filter cleared in the United States — a spider-shaped nitinol cage meant to catch blood clots traveling toward the heart and lungs and then, unlike permanent filters, to be removed once the danger passed. A confidential study Bard commissioned in 2004 found the opposite of a safe device: the Recovery carried higher relative risk of death, filter fracture, and migration than every competing filter on the market.
The failure mechanism was mechanical and lethal. The Recovery’s thin struts fractured, and the broken fragments — sharp lengths of nitinol — embolized through the bloodstream into the right heart and the pulmonary arteries, or the whole filter migrated and perforated the vena cava wall. A December 2005 internal Bard document, later obtained by NBC News, recorded that the Recovery had an “11.5 times higher reporting rate for filter embolization deaths” than all other vena cava filters combined. Bard had recruited a veteran regulatory specialist, Kay Fuller, to shepherd the FDA clearance; Fuller refused to sign the application over safety concerns, and the application reached the FDA bearing what she says is a forged version of her signature.
Rather than recall the Recovery after the 2004 report urged urgent investigation, Bard withdrew it from sale in 2005 and sold the G2 — a device Bard’s own records show it knew was fracturing and migrating within four months of clearance. The death toll surfaced not through a regulator but through a year-long NBC News investigation broadcast in September 2015, which linked the Recovery to at least 27 deaths and more than 300 non-fatal injuries. Thousands of suits consolidated into a multidistrict litigation in Arizona, and the first bellwether — Sherr-Una Booker, whose G2 fractured and required open-heart surgery — produced a $3.6 million verdict in March 2018, including $2 million in punitive damages. The FDA never recalled the Recovery; the legend of the “retrievable” filter ended as a case study in replacing a known-defective implant instead of retrieving it.