This talk discusses the risks of connected healthcare devices. Based off output from security assessments performed against medical devices widely deployed at various hospitals and medical institutions, I will present an in-depth analysis of the target medical devices and how I was able to compromise them to gain access to plethora of medical records from all the medical institutions it was deployed at and not just the one where our target device was hosted.