FDA issued a warning letter dated September 1 to O.N. Diagnostics over version 3.0.0 of VirtuOst VFA, software that grades vertebral fractures on spine CT. The cleared version sits under K171435. FDA called the device adulterated under section 501(f)(1)(B) and misbranded under 502(o), and cited 21 CFR 807.81(a)(3)(i) for the missing premarket notification.
The agency named three changes, each of which it said would independently require clearance. The company swapped in a new machine learning model for vertebral landmarking. It moved the software from a desktop application to a web architecture. It migrated the underlying technology platform, which required revalidating the codebase and its third-party components.
FDA quoted the company's own inspection statement that the web transition had expanded its vulnerability to cyberattacks. The letter also cites quality system and medical device reporting problems, and follows a March 2026 inspection. FDA asked the company to stop commercial distribution of 3.0.0.
O.N. Diagnostics says it is finishing verification and validation on a revised version that strips out the machine learning functionality, with updated cybersecurity controls and documentation. A predetermined change control plan filed before the retrain would have covered the model swap and neither of the other two changes.