Collection of Robotic Surgery Malfunctions

Study on database reports of robotic surgery malfunctions (8,061), including those ending in injury (1,391) and death (144), between 2000 and 2013.

Risk classification

• Primary risk domain: 7 AI system safety, failures, & limitations
• Primary risk subdomain: 7.3 Lack of capability or robustness

The incident involves a high volume of technical failures, hardware breakages, electrical arcing, and system errors where the robotic system failed to perform reliably under clinical conditions.

Additional risk subdomains

• 5.1 Overreliance and unsafe use: Some adverse events were associated with operator errors and the use of the system in highly complex procedures where surgical teams lacked sufficient expertise.

Causal factors

• Entity: AI
• Intent: Unintentional
• Timing: Post-deployment

The physical harms and deaths resulted from unintentional technical malfunctions and uncontrolled actions of the robotic surgical system during active clinical deployment.

EU AI Act risk tier

• Risk tier: 2 High Risk

High Risk: The system is an AI-assisted medical device used in healthcare, which directly impacts patient safety and physical well-being.

AI system and alleged parties

• AI system: robotic surgical systems
• AI purpose: Robotic Manipulation; Health AI Assistant
• Behaviour type: Assistant
• Alleged developer: Intuitive Surgical
• Alleged deployer: Hospitals, Doctors
• Alleged harmed parties: patients

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Substantial, indirect Minor
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Substantial, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Physical

Reported: The reports explicitly describe extensive physical harm, including 144 deaths and 1,391 injuries, associated with robotic surgical procedures.

Directly caused: Direct physical harms included 193 patients burned by electrical sparks, 1 death and 119 injuries from broken robot parts falling into patients, and 2 deaths and 52 injuries from uncontrolled robot movements.

Indirectly caused: Some injuries and prolonged procedure times resulted from system restarts and emergency conversions to non-robotic surgical techniques during malfunctions.

Inferred additional harm: Because the FDA database relies on voluntary and incomplete reporting, the actual number of physical injuries and deaths is likely higher than the reported figures.

Property

Reported: The reports describe physical damage to the robotic surgical instruments themselves during procedures.

Directly caused: Robotic tools experienced physical breakage, with pieces falling off, and electrical components suffered damage from arcing and sparking.

Inferred additional harm: Hospitals likely incurred significant property damage costs to repair or replace malfunctioning and broken robotic surgical components.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1535
• People reportedly exposed: 1740000

Potential causes

Management

• Aggressive Technology Marketing: Direct-to-consumer marketing misled public on robotic superiority.
• Slow Safety Improvements: Constant accident rates suggest failure to iron out system problems.

Technology

• Uncontrolled Instrument Movement: Unintended movements of robotic arms injured 52 and killed 2 patients.
• Electrical Arcing and Sparking: Electrical sparks emitted by robots burned 193 patients during surgery.
• Video Feed and System Errors: Loss of video feed and system errors caused procedure interruptions.

Data Inputs

• Underreported Adverse Events: Incomplete counting and recording errors in FDA database hide true risk.
• Incomplete Incident Details: Vast majority of reports only state 'malfunction' without detailed causes.

Human Factors

• Lack of Robotic Expertise: Less robotic experience in complex cardiothoracic and head/neck surgeries.
• Operator Error: Surgical team errors contributed to a portion of the adverse events.
• Inadequate System Training: Lack of uniform standards for surgical team training on robotic systems.

Process and Methods

• Poor Incident Investigation: Lack of robust accident investigation and reporting mechanisms.
• Complex Surgical Procedures: High complexity of certain surgeries increases the likelihood of errors.
• Inadequate Safety Design: Lack of safety-based design techniques in the robotic systems.

Regulatory Environment

• Voluntary Reporting Flaws: Reliance on voluntary reporting leads to underestimation of incident rates.
• Lack of Uniform Standards: No standard regulations for surgical team training and system operation.

Information quality

• Classification confidence: High
• Reason for confidence: The analysis is based on a structured retrospective study of 14 years of FDA MAUDE database records, providing clear, quantified data on deaths, injuries, and malfunctions that are cross-verified across multiple reports.
• Ambiguities identified: The FDA database reports often lacked detailed circumstances for the majority of deaths, making it difficult to definitively separate device malfunction from operator error or inherent surgical risks.
• Alternative interpretations: Some events classified as device malfunctions might have involved human operator error or standard surgical complications not directly caused by the robot.

A retrospective study of robotic surgical systems in the US from 2000 to 2013 identified 144 deaths and 1,391 injuries linked to technical malfunctions. While representing a serious public health and safety issue, the incident has minor national security implications as it involves localized medical accidents under human control rather than adversarial threats or systemic infrastructure failures.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The assessment is based on a retrospective study of historical data spanning 2000 to 2013, representing an ongoing safety and regulatory concern rather than an active crisis.
• Autonomy: Human-controlled. The surgical robotic system operates under the direct physical control of a human surgeon, acting as an assistant rather than making autonomous clinical decisions.
• Novelty: Established threat. Technical malfunctions in robotic surgical systems are well-documented, with a constant rate of accidents per procedure observed over a thirteen-year period.

Impact by dimension

• Physical security: Minor. The incident involved physical harm including 144 deaths and 1,391 injuries due to technical malfunctions. However, these were localized medical accidents during routine procedures and do not constitute a kinetic attack or a systemic threat to national critical infrastructure.
• Information security: Negligible. There is no indication of intelligence compromise, classified data theft, or information warfare operations associated with these medical device malfunctions.
• Sovereignty: Negligible. The malfunctions did not impact government decision-making, state authority, electoral systems, or any core government functions.
• Economic security: Minor. The recurring malfunctions and design issues highlight safety challenges in US medical robotics technology, but they do not represent strategic technology theft, economic warfare, or a loss of technological competitive advantage.
• Societal stability: Negligible. The incident does not involve mass surveillance, algorithmic oppression, or any threats to civil liberties or societal stability.