{
  "docId": "019dd923-622c-750b-8b96-76efb5813bae",
  "docSlug": "8ff52fe302da",
  "documentTitle": "St. Jude Medical (STJ)",
  "authorId": "51_Muddy_Waters",
  "authorName": "Carson C. Block",
  "documentKindSlug": "research-note",
  "documentKindLabel": "Research note",
  "sourceTypeSlug": "short_seller",
  "sourceTypeLabel": "Short seller",
  "presentationDate": "2016-08-25 00:00:00",
  "orientation": "portrait",
  "aspectRatio": 0.77272725,
  "pageNumber": 10,
  "pageCount": 34,
  "prevPage": 9,
  "nextPage": 11,
  "slideType": "villain_critique",
  "function": "name_villain",
  "density": "dense",
  "nDataPoints": 3,
  "notes": "The slide uses a confrontational tone to frame STJ as negligent in cybersecurity, citing a $6.4 billion potential liability.",
  "elementsJson": [
    "paragraph",
    "photo",
    "footnote"
  ],
  "metadataConfidence": 0.95,
  "imagePath": null,
  "slideHref": "/slides/019dd923-622c-750b-8b96-76efb5813bae/10",
  "deckHref": "/decks/019dd923-622c-750b-8b96-76efb5813bae",
  "deckJsonHref": "/decks/019dd923-622c-750b-8b96-76efb5813bae.json",
  "deckAnchorHref": "/decks/019dd923-622c-750b-8b96-76efb5813bae#slide-10",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "As a result, any programmer or Merlin @ Home device can communicate with any Cardiac Device, and once the communication protocol is understood, generally any device can be impersonated.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd953-1ac3-70f9-854f-45812dd3f51e",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.2,
        "w": 0.3,
        "x": 0.35,
        "y": 0.35
      },
      "kind": "image",
      "text": "Medtronic MyCareLink monitor",
      "attrs": null,
      "subkind": "photo",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "dc4acd6e-dd2e-464a-800c-4388f3d16dc7",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.035,
        "w": 0.764,
        "x": 0.118,
        "y": 0.093
      },
      "kind": "paragraph",
      "text": "grossly negligent in its product design. (We estimate awards if litigated to a verdict could total $6.4 billion.13)",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "07e609f3-c0e7-4378-80c9-a81e364116ff",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.07,
        "w": 0.764,
        "x": 0.118,
        "y": 0.65
      },
      "kind": "paragraph",
      "text": "The STJ communication protocol does not include the use of any unique or one-time tokens... any programmer or Merlin @ Home device can communicate with any Cardiac Device.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "19247614-5d68-4110-8b70-021b70770361",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.764,
        "x": 0.118,
        "y": 0.54
      },
      "kind": "paragraph",
      "text": "MDT's MyCareLink monitor has a wand that has to be detached and put within inches of the implantable to communicate – similar to earlier versions of STJ's home monitoring devices.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "3fab3d3b-f758-44be-b8a8-e4aabe31a549",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.071,
        "w": 0.764,
        "x": 0.118,
        "y": 0.148
      },
      "kind": "paragraph",
      "text": "One of the purposes of this report is unapologetically to single out STJ for what we see as its incompetence in, or indifference to, device security.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "5b23113c-2b9c-43e3-897b-2f91314a91b0",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.04,
        "w": 0.764,
        "x": 0.118,
        "y": 0.88
      },
      "kind": "source-note",
      "text": "13 Assumes damages of $15,000 per each of 260,000 Merlin@home device users, plus damages of $5,000 per each of an estimated 490,000 U.S. Cardiac Device users who do not use Merlin@home.",
      "attrs": {
        "numbered": true
      },
      "subkind": null,
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "6c2f002c-7ba9-42b1-83f5-0b7a8cdc5368",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [
    {
      "name": "antagonist-introduction",
      "slug": null,
      "matchId": "2126edf1-ae65-491d-93fa-16cc4ba2b8c1",
      "evidence": "The text explicitly singles out STJ for incompetence and indifference to security.",
      "confidence": 0.9
    }
  ],
  "arcBeats": [],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}