Medtronic, Inc.

Medtronic Inc. reported a cybersecurity incident where an unauthorized actor accessed corporate IT systems from April 13-19, 2026. Medtronic became aware of unusual activity on April 15, 2026. Affected data includes names, contact info, dates of birth, Social Security numbers, and health-related information for patients with Medtronic devices. The company engaged third-party cybersecurity experts, notified law enforcement and regulators, and is offering 24 months of credit and identity monitoring services. No evidence suggests data was publicly posted.

Medtronic Inc. notified the New Hampshire Attorney General on June 29, 2026, of a cybersecurity incident occurring between April 13 and 19, 2026. An unauthorized actor accessed corporate IT systems, potentially exposing personal information of 12,215 New Hampshire residents, including names, contact info, DOB, SSN, and health-related data. Medtronic engaged third-party cybersecurity experts, notified law enforcement and consumer reporting agencies, and offered 24 months of credit monitoring and identity theft restoration services. Device safety was not impacted.

Affected (this filing): 12,215

Medtronic Inc., a health sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2026-04-15 and filed notice on 2026-06-29. 64,035 Washington residents were affected. 75 days elapsed between awareness and notification. 2 days to identify the breach. 4 days to contain the breach.

Affected (this filing): 64,035

Medtronic Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-04-13 and was reported on 2026-06-29. 90,889 Indiana residents were affected. 3,834,294 individuals affected in total.

Affected (this filing): 3,834,294

Medtronic Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-06-29. The breach occurred during 4/13/2026 - 4/19/2026. The breach was discovered on 4/15/2026. 3,834,294 individuals were affected. Notice was sent on 6/29/2026.

Affected (this filing): 3,834,294

Medtronic Inc. disclosed a cybersecurity incident affecting Rhode Island residents. Unauthorized actors accessed corporate IT systems between April 13 and 19, 2026. Impacted data included names, contact info, DOB, SSN, and health-related information. Medtronic engaged third-party cybersecurity experts, worked with law enforcement, and offered 24 months of credit monitoring and identity theft restoration via Epiq. The incident did not affect device safety.

Affected (this filing): 12,054

Medtronic Inc. based in Minneapolis, Minnesota, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-04-15 and reported on 2026-06-30. 297,307 Texas residents were affected. 3,834,294 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information;Date of Birth. Consumers were notified via U.S. Mail.

Affected (this filing): 297,307