Medtronic Confirms Corporate IT Breach Amid Claims of 9 Million Records Stolen

Medtronic said an unauthorized party accessed data in portions of its corporate IT environment and that it has contained the incident, activated response procedures, and engaged external cybersecurity experts. The company said it has not identified any impact on products, patient safety, customer connections, manufacturing and distribution operations, financial reporting systems, or its ability to meet patient needs, stressing that corporate IT, product, manufacturing, and hospital customer networks are segmented.

The disclosure followed extortion claims tied to ShinyHunters, which said it stole more than 9 million records containing personally identifiable information along with terabytes of internal corporate data and briefly listed Medtronic on its leak site before the entry disappeared. Medtronic said its investigation is ongoing to determine whether personal data was accessed and that it will notify affected individuals and provide support services if exposure is confirmed, while separate reporting also linked the incident to Handala, underscoring uncertainty around attribution even as the breach itself has been confirmed.