Medela data breach exposes 423,947 accounts
Medela
Swiss medical device maker Medela suffered a breach on September 7, 2026, where attackers accessed and published over 423,000 records containing email addresses, names, phone numbers and support tickets. The leak exposed personal and corporate contact information of healthcare professionals and staff.
why this severityConfirmed breach exposing personal data of over 400k accounts
- first report
- 30 Sep 2026
- last update
- 30 Sep 2026
What to do
Investigate the breach, notify affected users, and improve security controls
Timeline · 1
- 30 Sep 2026Medela data breach exposes 423,947 accounts
Sources · 1
News and write-ups
- 2026-09-30Medela data breach exposes 423,947 accountsHave I Been Pwned · haveibeenpwned.com/Breach/Medela
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- No AI role
- categories
- General security
- severity
- 4 · Confirmed real-world loss
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 7 Sep 2026 · first reported 30 Sep 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-10-26 14:52Z · updated 2026-10-30 03:33Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Medela data breach exposes 423,947 accounts https://gcdradar.vercel.app/incidents/medela-data-breach-exposes-423-947-accounts · AIR-2026-1517 · closed 2026-10-14 - Lane: Breaches & attacks - Severity: 4 (Confirmed real-world loss): Confirmed breach exposing personal data of over 400k accounts - Fix status: No fix needed - First reported: 2026-09-30 (happened 2026-09-07) - AI role: No AI role - Products: Medela ## Summary Swiss medical device maker Medela suffered a breach on September 7, 2026, where attackers accessed and published over 423,000 records containing email addresses, names, phone numbers and support tickets. The leak exposed personal and corporate contact information of healthcare professionals and staff. ## What to do Investigate the breach, notify affected users, and improve security controls ## Latest updates - 2026-09-30: Medela data breach exposes 423,947 accounts (https://haveibeenpwned.com/Breach/Medela) ## Sources - 2026-09-30 Have I Been Pwned: Medela data breach exposes 423,947 accounts https://haveibeenpwned.com/Breach/Medela Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedLaw firm IT systems Data breach impacts multiple Bay Street law firms
Breaches & attacks · Real loss · since 30 Oct 2026
- closedResolve payment systems Fashion retailer Resolve suffers payment card data breach
Breaches & attacks · Real loss · since 30 Oct 2026
- live4.3Ivanti Connect Secure CVE-2026-118527: Ivanti Connect Secure Identifier Generation Flaw
Patch now · Exploited · Patched · since 30 Oct 2026 · updated 2 Nov 2026 · CVE-2026-118527
- live7.0Ivanti Connect Secure CVE-2026-111357: Ivanti Connect Secure Authentication Bypass
Patch now · Exploited · Patched · since 30 Oct 2026 · updated 31 Oct 2026 · CVE-2026-111357
- live9.8Palo Alto Firewalls PHP2Shell Attacks Target Palo Alto Firewalls
Patch now · Exploited · No patch yet · since 30 Oct 2026
- liveiOS Apple Alerts Users in 99 Countries Regarding Mercenary Spyware
Breaches & attacks · Real loss · since 30 Oct 2026 · updated 10 Nov 2026