Northeastern Student Researchers Identify 20 Cybersecurity Vulnerabilities in Fertility Tracker

In August 2026, four Northeastern University student researchers presented significant findings from their cybersecurity analysis of the Mira Ultra 4 fertility tracker, highlighting the importance of building security into the rapidly growing FemTech ecosystem.

Gigi Xiaoqing Liu, Muzzammil Mohammed, Narmina Karimova, and En Lucas Mong examined the tracker’s device, mobile application, and cloud infrastructure. Their research identified 20 cybersecurity vulnerabilities, including issues that could have exposed sensitive health information or allowed false hormone readings to be injected into the app.

The students responsibly disclosed their findings through a coordinated process involving the manufacturer, the U.S. Food and Drug Administration, and the Cybersecurity and Infrastructure Security Agency. Mira subsequently implemented multiple security improvements in response to the research.

The students shared their work with the broader medical device cybersecurity community through the Biohacking Village at DEF CON, where they exchanged ideas with experts and demonstrated the important contributions the next generation of researchers is already making to the field.

Archimedes congratulates Gigi, Muzzammil, Narmina, and En Lucas on this outstanding work and recognizes Kevin Fu, Axel Wirth, and Jiancong Cui for their guidance and support. Their collaboration shows how rigorous research, responsible disclosure, and engagement across academia, government, and industry can lead to safer connected health technologies.

Read more about the research in HealthcareInfoSecurity.