Medtronic Notifies Customers After Breach; ShinyHunters Claims 9 Million Records
Summary
Medtronic confirmed unauthorized access to corporate IT systems and is notifying customers about potentially exposed personal and health-related data. ShinyHunters claimed 9 million records; Medtronic says the data was not posted online.
Key points
- Medtronic said an unauthorized actor accessed certain corporate IT systems from April 13 to April 19, 2026.
- Potentially affected information includes names, contact details, birth dates, Social Security numbers, and health-related information.
- ShinyHunters claimed responsibility and alleged it held 9 million Medtronic records.
- Medtronic said the stolen data was not exposed online; the group’s listing was later removed.
- Medtronic is offering affected customers 24 months of credit monitoring and identity theft protection.
- The company said its medical devices remain safe to use and were not affected.
Article Details
- Victim Organization
- Medtronic
- Incident Type
- Unauthorized access to corporate IT systems and exposure of personal data
- Incident Date
- 2026-04-13
- Data Types Exposed
- Full names
- Contact information
- Dates of birth
- Social Security numbers
- Health-related information
- Affected Records
- ShinyHunters alleged that it possessed 9 million records; Medtronic did not confirm this volume.
- Operational Impact
- Medtronic said its devices remain safe to use and are not affected. The company stated that the stolen data was not posted online.
- Ransom Or Extortion
- ShinyHunters listed Medtronic on its extortion portal on April 18, 2026, and threatened to release the allegedly stolen data unless a ransom was paid by April 21, 2026. The listing was later removed; the source does not report whether a ransom was paid.
- Claim Status
- confirmed