Healthcare device firm **Medtronic** has confirmed a data breach impacting its IT systems, with the infamous data extortion group **ShinyHunters** claiming responsibility for the attack. The threat actor initially asserted they had stolen 9 million **Medtronic** records containing personally identifiable information (PII) and internal corporate data.  According to **Medtronic**'s notification sample, the company first detected unusual activity on certain corporate IT systems on April 15, 2026. An subsequent investigation, aided by leading third-party cybersecurity experts, revealed unauthorized access to these systems from April 13 to April 19, 2026. **Exposed Data Categories** The compromised data may include a range of sensitive information: * Full name * Contact information * Date of birth * Social Security number * Health-related information **ShinyHunters' Extortion Tactics** **ShinyHunters** typically lists victim organizations on their dark web extortion portal, threatening to release stolen data if ransom demands are not met. **Medtronic** appeared on their portal on April 18, with a deadline of April 21 for ransom payment. However, the entry was removed later that month. **Medtronic** has emphasized in its customer notifications that the stolen data was not subsequently exposed online. **Impact and Remediation** **Medtronic**, a global medical device company operating in 150 countries with 95,000 employees and an annual revenue of $33.5 billion, assures customers that its medical devices remain safe and were unaffected by this cybersecurity incident. Customers who receive notifications are advised to enroll in the complimentary 24-month credit monitoring and identity theft protection services offered by **Medtronic**. Additionally, vigilance is recommended against suspicious communications, social engineering, phishing attempts, and close monitoring of financial and personal account activity.