MiniMed Distribution
Disclosed Apr 30, 20215 years ago58,374 affectedConfirmed
The covered entity (CE), MiniMed Distribution Corp., reported that it disclosed the protected health information (PHI) of 58,374 individuals to Google through Google Analytics, Crashlytics, and Firebase Authentication. The PHI involved included clinical and demographic information. The CE notified HHS, affected individuals, and the media of the breach. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 58,374 (as reported to HHS) |
|---|---|
| Disclosed | Apr 30, 2021 |
| Discovered | Feb 13, 2023 |
| Happened | Sep 10, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: MiniMed Distributionoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: MiniMed Distributionatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: MiniMed Distributionjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): MiniMed Distribution (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 30, 2021 | 1,658 |
| California AGresidents of CA | Apr 14, 2023 | |
| Washington AGresidents of WA | Apr 14, 2023 | |
| Oregon DOJresidents of OR | Apr 14, 2023 | 58,374 |
| HHS archivetotal | Apr 14, 2023 | 58,374 |
History of this record
- 2026-09-25 · disclosed: 2023-04-14 to 2021-04-30 · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 58374 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), MiniMed Distribution Corp., reported that it disclosed the protected health information (PHI) of 58,374 individuals to Google through Google Analytics, Crashlytics, and Firebase Authentication. The PHI involved incl · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2023-02-13 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.