Medtronic, Inc.

Medtronic Inc. based in Minneapolis, Minnesota, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-04-15 and reported on 2026-06-30. 297,307 Texas residents were affected. 3,834,294 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information;Date of Birth. Consumers were notified via U.S. Mail.

Medtronic Inc. reported a cybersecurity incident where an unauthorized actor accessed corporate IT systems from April 13-19, 2026. Medtronic became aware of unusual activity on April 15, 2026. Affected data includes names, contact info, dates of birth, Social Security numbers, and health-related information for patients with Medtronic devices. The company engaged third-party cybersecurity experts, notified law enforcement and regulators, and is offering 24 months of credit and identity monitoring services. No evidence suggests data was publicly posted.

Medtronic Inc. notified the New Hampshire Attorney General on June 29, 2026, of a cybersecurity incident occurring between April 13 and 19, 2026. An unauthorized actor accessed corporate IT systems, potentially exposing personal information of 12,215 New Hampshire residents, including names, contact info, DOB, SSN, and health-related data. Medtronic engaged third-party cybersecurity experts, notified law enforcement and consumer reporting agencies, and offered 24 months of credit monitoring and identity theft restoration services. Device safety was not impacted.

Medtronic Inc. reported a cybersecurity incident affecting Washington residents. Unauthorized access occurred April 13-19, 2026, discovered April 15, 2026. Impacted data included names, contact info, DOB, SSNs, and health information. 64,035 Washington residents affected. Medtronic engaged forensic experts, notified law enforcement, and offered 24 months of credit/identity monitoring.

Medtronic Inc. filed a breach notification with the Massachusetts Attorney General regarding a cybersecurity incident involving personal information. The company is offering 24 months of complimentary credit monitoring, dark web monitoring, and identity theft restoration services through Epiq to affected individuals. The notice provides guidance on placing security freezes and fraud alerts with credit bureaus.

Medtronic Inc. disclosed a cybersecurity incident; its notice states that approximately 12,054 Rhode Island residents were potentially impacted. Unauthorized access occurred between April 13-19, 2026, impacting patient data including names, SSNs, DOBs, and health information. Medtronic engaged third-party experts and law enforcement, offering 24 months of credit and identity monitoring.

Medtronic Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-04-13 and was reported on 2026-06-29. 90,889 Indiana residents were affected. 3,834,294 individuals affected in total.

Medtronic Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-06-29. The breach occurred during 4/13/2026 - 4/19/2026. The breach was discovered on 4/15/2026. 3,834,294 individuals were affected. Notice was sent on 6/29/2026.

Medtronic Inc. disclosed a cybersecurity incident affecting Rhode Island residents. Unauthorized actors accessed corporate IT systems between April 13 and 19, 2026. Impacted data included names, contact info, DOB, SSN, and health-related information. Medtronic engaged third-party cybersecurity experts, worked with law enforcement, and offered 24 months of credit monitoring and identity theft restoration via Epiq. The incident did not affect device safety.

Medtronic Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-06-28. The reporting organization type is Health Care. 8,668 Vermont residents were affected. Categories of data breached: Social Security Numbers, Health Records.

MEDTRONIC INC. filed a data-breach notice with the Illinois Attorney General in June 2026 (case 26-06-1288). The register records the breach as discovered on April 15, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Medtronic plc filed an 8-K on April 24, 2026, disclosing that an unauthorized third party accessed certain IT systems. The company contained the incident, activated response protocols, and engaged external experts. No impact to patient safety or operations was identified, and no material financial impact is expected.

MiniMed Group, Inc. (a subsidiary of Medtronic plc) filed an 8-K on April 27, 2026, reporting a cybersecurity incident affecting Medtronic's IT systems. Medtronic engaged external experts and contained the incident. MiniMed stated it was not aware of any compromise to its own IT systems and did not expect a material impact on its business or financial results.

Medtronic Minimed reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-11-26. 80 Massachusetts residents were affected. The report records the breach type as paper.

Medtronic reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-03-21. 3 Massachusetts residents were affected. The report records the breach type as paper.

Medtronic notified Montana residents of a data breach involving the MiniMed Ambassador Program. Personal information, including names, addresses, and healthcare provider names, was inadvertently accessible on the internet due to a storage misconfiguration. Medtronic offered one year of credit monitoring through ID Experts.

Medtronic, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-07-23. 31 Massachusetts residents were affected. The report records the breach type as paper.

Medtronic, Inc. reported to HHS on 2013-07-10 a Theft affecting 2764 individuals. Breached information located on Paper/Films. The covered entity misplaced a box of paper records containing patient pump training records, patient names, device serial numbers, phone numbers, email addresses, and potentially social security numbers and medical records.