AccidentalMisconfigurationPublishing ErrorCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICCREDENTIALSLOCATIONBEHAVIORMETADATAPHIHEALTH_BASICMINORMediumResolved
Minimed Distribution Corp
bd_8ed689cca36706d2 · schema v1 · pii pii-v1
Full breach record for Minimed Distribution Corp →Medtronic MiniMed and MiniMed Distribution Corp disclosed that tracking technologies (Google Analytics, Crashlytics, Firebase Authentication) in the InPen App inadvertently transmitted user data to Google. The incident affected users since September 2020. Data exposed included email, IP address, phone number, usernames, passwords, and device identifiers. No SSN or financial data was involved. The company removed Google Analytics and is transitioning to new platforms.
California clockDiscovered Feb 13, 2023 → Notified Apr 14, 202360d ✓ CA 60-day OK9 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_03be0669e0a17edbWashington State AGfiled 2023-04-14Verified
- bd_1625edd17f6757c4Oregon State AGfiled 2023-04-14Verified
- bd_92fc04ad3510e540HHS OCRfiled 2023-04-14Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-565575
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2023
- Raw hash
- c89be5a9fca3c614ec4e48a7cea96d0f1a7da741373a7a9d178c577dd28c0fbe
Reporting entity
- Name
- MEDTRONIC MINIMED, INC.norm: medtronic minimed
Victim entity
- Name
- Minimed Distribution Corpnorm: minimed distribution
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Apr 14, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICCREDENTIALSLOCATIONBEHAVIORMETADATAPHIHEALTH_BASICMINOR
- Attack vector
- Misconfiguration
- Regulator citations
- Filed breach notification with California Attorney General
- Third party
- via Google
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2023→ Notified: Apr 14, 202360d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.