Medtronic

Disclosed Apr 27, 20263,834,294 affectedConfirmed

Medtronic confirms breach after ShinyHunters claims 9 million records

Medtronic confirmed attackers accessed certain corporate IT systems between April 13 and 19, 2026 after ShinyHunters claimed 9 million records. In July it began notifying people whose names, birth dates, SSNs and health information were exposed; it said the data was not posted online.

What is known

People affected	3,834,294 (as reported by the organization)
Disclosed	Apr 27, 2026
Discovered	Apr 15, 2026
Happened	Apr 13, 2026
Attack	Extortion
Data exposed	NamesSocial Security numbersHealthEmailsPhone numbersDates of birthAddresses
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Medtronic

Official noticeatg.wa.gov

Washington Attorney General breach notice: Medtronic

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Medtronic

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Medtronic

Newsbleepingcomputer.com

Medtronic confirms breach after hackers claim 9 million records theft

Newsbleepingcomputer.com

Medtronic notifies customers impacted by ShinyHunters data breach

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005149: Medtronic

Official noticeago.vermont.gov

Vermont Attorney General breach report: Medtronic

Official noticein.gov

Indiana Attorney General 2026 data breach report: Medtronic

Notices filed

TotalApr 27

ResearchCount not stated

Residents of VTJun 28

Vermont AG8,668 people

Residents of CAJun 29

California AGCount not stated

Residents of WAJun 29

Washington AG64,035 people

Residents of DEJun 29

Delaware DOJ14,745 people

Residents of ORJun 29

Oregon DOJ3,834,294 people

Residents of INJun 29

Indiana AG90,889 people

Residents of TXJun 30

Texas AG297,307 people

Other breaches at Medtronic

Breach, details not statedBreach notice filed with the Indiana AG, details not stated.TechUSNov 21, 2018 Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.2,764 affectedHealthcareUSJul 10, 2013

History of this record

source2026-09-25

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdfby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/categories/security-breach-noticesby backfillSource

data_types2026-09-25

["names","ssn","health","emails","phone","dob"] to ["names","ssn","health","emails","phone","dob","addresses"]by backfillSource

sector2026-09-25

tech to healthby seedSource

attack2026-09-25

hacking to extortionby seedSource

data_types2026-09-25

["names","ssn","health"] to ["names","ssn","health","emails","phone","dob"]by seedSource

disclosed2026-09-25

2026-06-29 to 2026-04-27by seedSource

summary2026-09-25

empty to Medtronic confirmed attackers accessed certain corporate IT systems between April 13 and 19, 2026 after ShinyHunters claimed 9 million records. In July it began notifying people whose names, birth dates, SSNs and health information were expby seedSource

title2026-09-25

empty to Medtronic confirms breach after ShinyHunters claims 9 million recordsby seedSource

data_types2026-09-25

[] to ["names","ssn","health"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 3834294by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2026-04-15by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Medtronic