Cyberattack on mylife App and Cloud May Have Exposed User Data

· Original article ↗

Summary

A cyberattack on a server operated by mylife’s IT provider may have exposed account details and some technical logs. The company says passwords were not accessed, services remain operational, and a ransomware group threatened to publish data.

Key points

  • SINOVO health solutions informed mylife Diabetes Care that a server managing mylife App and Cloud accounts was attacked on September 3, 2026.
  • The company says a ransomware group may have accessed and copied some user data and threatened publication.
  • Potentially affected information includes names, birth dates, email addresses, and pseudonymized app logs that may contain limited therapy-related entries.
  • The company says full therapy diaries, complete glucose records, postal addresses, and payment data were not stored on the attacked server.
  • Passwords were stored in encrypted form and, according to the company, were not accessed; the app and cloud service remain operational.
  • The company reported the incident to data-protection authorities and recommends changing mylife passwords and any reused passwords.

Article Details

Victim Organization
mylife Diabetes Care
Incident Type
Cyberattack on a server managing mylife App and mylife Cloud user accounts, with possible copying of user data
Incident Date
2026-09-03
Disclosure Date
2026-09-10
Data Types Exposed
  • First and last names
  • Dates of birth
  • Email addresses
  • Possibly pseudonymized technical app logs, which may contain limited therapy-related entries such as bolus data or continuous glucose monitoring values
Operational Impact
The mylife App and mylife Cloud continued to function normally. Passwords were stored in encrypted form and, according to the information available at the time, were not accessed.
Ransom Or Extortion
The company reported that the attacker threatened to publish the data. No ransom demand was reported.
Claim Status
alleged

People

Vendors

Products

Industries