Medical technology group Medtronic is notifying around 3.8 million patients of a major data breach resulting from a cyber attack. According to the company, personal and sensitive health data was stolen, including names, contact details, dates of birth, National Insurance numbers and medical information.
The attack took place back in April 2026 and is attributed to the hacker group ShinyHunters. According to the group’s own statements, it had obtained more than nine million data records and several terabytes of internal company data. According to Medtronic, there is as yet no indication that the stolen data has been published.
The company is offering those affected two years of free services, including credit monitoring, dark web monitoring and support in the event of identity theft. Medtronic also emphasises that its own medical devices, as well as its production and supply chains, were not compromised at any time. At the same time, additional security measures have been implemented and the investigating authorities have been notified.
