Medtronic Confirms Corporate IT Breach as ShinyHunters Claim Theft of 9 Million Records
Summary
Medtronic disclosed a breach affecting certain corporate IT systems. ShinyHunters claim they stole more than 9 million records and terabytes of internal data; Medtronic is investigating whether personal data was accessed.
Key points
- Medtronic disclosed a breach involving certain corporate IT systems.
- ShinyHunters claim they stole more than 9 million records containing personal information and terabytes of internal corporate data; the theft claims are not independently confirmed in the article.
- Medtronic said products, patient safety, customer connections, manufacturing, and distribution were unaffected.
- The company said hospital customer networks are separate from its IT networks and are managed by customers.
- Medtronic is investigating whether personal data was accessed and says it will notify affected people and offer support if exposure is confirmed.
Article Details
- Victim Organization
- Medtronic
- Incident Type
- Breach of certain corporate IT systems; ShinyHunters claimed data theft and attempted extortion.
- Data Types Exposed
- Personally identifiable information (claimed by ShinyHunters; exposure is under investigation)
- Internal corporate data (claimed by ShinyHunters)
- Affected Records
- ShinyHunters claimed to have stolen more than 9 million records; Medtronic has not confirmed the theft.
- Affected Data Size
- ShinyHunters claimed to have stolen terabytes of internal corporate data; this has not been confirmed.
- Operational Impact
- Medtronic reported no impact to products, patient safety, customer connections, manufacturing or distribution operations, financial reporting systems, or its ability to meet patient needs. The company said hospital customer networks are separate from its IT networks.
- Ransom Or Extortion
- ShinyHunters threatened to release the allegedly stolen data unless Medtronic engaged in ransom negotiations. The group listed Medtronic on April 18 and set an April 21 deadline; the year is not stated. Medtronic's payment or response is not reported.
- Claim Status
- confirmed