Medtronic Notifies More Than 3.8 Million After Data Breach
Summary
Medtronic says an unauthorized party accessed corporate IT systems and data belonging to more than 3.8 million people may have been exposed. The company reports no evidence the data was publicly posted and is offering 24 months of monitoring services.
Key points
- Medtronic confirmed unauthorized access to certain corporate IT systems on April 24.
- The company is notifying more than 3.8 million people that their data may have been exposed.
- The accessed data reportedly included Social Security numbers, health-related information, names, contact details, and dates of birth.
- The attack was reportedly linked to the ShinyHunters cybercrime group; the article does not establish independent confirmation of that attribution.
- Medtronic said it has no evidence the affected information was publicly posted or exposed online.
- The company is offering affected individuals 24 months of credit monitoring, dark web monitoring, and identity theft restoration services.
Article Details
- Victim Organization
- Medtronic
- Incident Type
- Unauthorized access to corporate IT systems and potential data breach
- Data Types Exposed
- Social Security numbers
- Health-related data
- Names
- Contact information
- Dates of birth
- Affected Records
- More than 3.8 million people may have had data exposed.
- Operational Impact
- An unauthorized party accessed data in certain corporate IT systems. Medtronic said it had not identified connections to its customers and had no evidence that impacted information was publicly posted or exposed on the internet.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed