/
← Voltar ao feed
medium healthcare medical devices

ShinyHunters 'pay or leak' extortion of Medela leaks 424k contact records, added to Have I Been Pwned

1 fonte(s) · 1 atualização(ões) · publicado 30/09/2026 08:48 · coletado há 1 dia

In September 2026, Swiss medical device company Medela was targeted in a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published and covers about 424k unique email addresses, mostly belonging to healthcare professionals, Medela staff and sales leads. Have I Been Pwned added the dataset on 30 Sep 2026 with 423.9k affected addresses and flagged it as sensitive, so it is not publicly searchable. The article does not say whether Medela has confirmed the breach.

Technical Details

  • Extortion model: "pay or leak" by ShinyHunters, with the data published afterwards.
  • Exposed data: email addresses, names, physical addresses and phone numbers, mostly corporate contact information. Some records also include associated support tickets.
  • The breach occurred in September 2026. The article does not state the initial access vector.
  • Because the breach is flagged as sensitive, a search requires the verified owner of the email address to go through the HIBP notification system.

Remediation

  • Affected individuals should check the "Breaches" section of their HIBP dashboard, or the "Domains" section for domains they control.
  • Use a password manager to set strong, unique passwords, change any affected password and enable 2FA wherever it is supported.
  • Because the exposed data is professional contact information, recipients should expect targeted phishing and social engineering that uses the leaked details.

Linha do tempo

  1. haveibeenpwned.com ↗ · pub. 30/09/2026 08:48 · coletado 19/10 17:56 primeiro registro

    ShinyHunters 'pay or leak' extortion of Medela leaks 424k contact records, added to Have I Been Pwned

    ler a análise desta fonte

    In September 2026, Swiss medical device company Medela was targeted in a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published and covers about 424k unique email addresses, mostly belonging to healthcare professionals, Medela staff and sales leads. Have I Been Pwned added the dataset on 30 Sep 2026 with 423.9k affected addresses and flagged it as sensitive, so it is not publicly searchable. The article does not say whether Medela has confirmed the breach.

    Technical Details

    • Extortion model: "pay or leak" by ShinyHunters, with the data published afterwards.
    • Exposed data: email addresses, names, physical addresses and phone numbers, mostly corporate contact information. Some records also include associated support tickets.
    • The breach occurred in September 2026. The article does not state the initial access vector.
    • Because the breach is flagged as sensitive, a search requires the verified owner of the email address to go through the HIBP notification system.

    Remediation

    • Affected individuals should check the "Breaches" section of their HIBP dashboard, or the "Domains" section for domains they control.
    • Use a password manager to set strong, unique passwords, change any affected password and enable 2FA wherever it is supported.
    • Because the exposed data is professional contact information, recipients should expect targeted phishing and social engineering that uses the leaked details.