Medtronic Breach Exposed Data of 72,000 in Two States

Medtronic's April cybersecurity incident affected more than 72,000 residents of Massachusetts and Vermont, with Social Security numbers and health records among the exposed data, according to state attorney general breach notification filings reported by Becker's Hospital Review.

Massachusetts recorded 63,534 residents affected in a filing dated June 29, with both SSNs and medical records compromised. Vermont accounted for the balance of the more than 72,000 total. The tallies reflect only two states, so the full national impact is likely larger as additional filings surface.

The breach adds Medtronic, one of the world's largest medical device makers, to a growing list of healthcare organizations reporting incidents that combine financial identifiers with clinical data. That mix is especially valuable to attackers and costly for victims, who face both fraud and privacy exposure. Affected individuals typically receive notification letters and offers of credit monitoring, while regulators increasingly scrutinize how quickly and completely companies disclose such events.