cyber.hendryadrian.com
Cyber Attack & Data Breach · securityweek.com

Medtronic Confirms Data Breach Affecting 3.8 Million People

· Original article ↗

Summary

Medtronic says a breach of its corporate IT systems affected 3,834,294 people, whose personal and medical data was stolen. The company says there is no evidence the information was publicly exposed; product and manufacturing operations were unaffected.

Key points

  • The incident occurred in April 2026, when ShinyHunters accessed Medtronic’s corporate IT systems.
  • Medtronic confirmed that 3,834,294 people were affected and that their personal and medical information was stolen.
  • The affected information included names, contact details, dates of birth, Social Security numbers and health-related details.
  • ShinyHunters claimed it stole more than 9 million personal-information records and terabytes of corporate data; the article says Medtronic was later removed from the group’s leak site.
  • Medtronic said it has no evidence that the information was publicly posted or exposed online.
  • The company said its products and manufacturing and distribution operations were not affected.
  • Medtronic is offering affected individuals 24 months of credit monitoring, dark web monitoring and identity theft restoration, and said it added safeguards and is working with cybersecurity experts and law enforcement.

Article Details

Victim Organization
Medtronic
Incident Type
Data breach involving unauthorized access to corporate IT systems and theft of personal and medical information.
Data Types Exposed
  • Names
  • Contact details
  • Dates of birth
  • Social Security numbers
  • Health-related details
Affected Records
3,834,294 individuals, according to Medtronic's notification to the Indiana Attorney General's Office. ShinyHunters separately claimed theft of over 9 million records.
Affected Data Size
ShinyHunters claimed to have stolen terabytes of corporate data; this claim was not confirmed in the article.
Operational Impact
Medtronic said its products and manufacturing and distribution operations were not affected. Corporate IT systems were accessed.
Ransom Or Extortion
ShinyHunters listed Medtronic on its leak site and claimed data theft. The group later removed the listing, which the article says might suggest a ransom was paid; no payment is confirmed.
Claim Status
confirmed

Threat Actors

ShinyHuntersThe article reports that ShinyHunters accessed Medtronic's corporate IT systems and listed the company on its leak site, claiming theft of over 9 million records and terabytes of corporate data. The claimed theft volume and possible ransom payment are not confirmed.

Industries

medical technologyMedical technology giant Medtronic is notifying more than 3.8 million individuals that their personal and medical information was compromised in a recent data breach.

Related Articles