Medtronic confirms breach after hackers claim 9 million records theft

Medical device giant Medtronic has confirmed a network breach after the ShinyHunters extortion group claimed to have stolen over 9 million records containing personally identifiable information, along with terabytes of internal corporate data. Medtronic states the breach affected only certain corporate IT systems and did not impact products, patient safety, manufacturing, or financial reporting. ShinyHunters had listed Medtronic on their leak site on April 18 with a ransom deadline of April 21, but the listing has since been removed. An investigation is ongoing to determine whether personal data was accessed, with notifications promised if exposure is confirmed.