Pedigo Products, Inc.
ent_f8ee88c69098ddfdcbf44aba
Disclosures
2
Leak Site · State AG · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
1
as filed · State AG MA
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Pedigo Products, Inc.
- Normalized
- pedigo products— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- pedigo-usa.com
Disclosure history (2)newest first
- GLOBALLeak Siteas victim2026-10-12
Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
- Massachusetts State AGas victim2026-10-01
Pedigo Products, Inc. notified Massachusetts residents of a data breach involving an organized cybercrime group that gained access to its corporate network in July 2026 and launched a cyberattack on September 15, 2026. The incident potentially exposed names, addresses, dates of birth, and Social Security numbers. The company shut down systems, engaged forensic specialists, notified law enforcement, and is offering 24 months of identity monitoring.