gcdRadar
closedclosed 14 Oct 2026Breaches & attacks4 Confirmed real-world loss

Medela data breach exposes 423,947 accounts

Medela

Swiss medical device maker Medela suffered a breach on September 7, 2026, where attackers accessed and published over 423,000 records containing email addresses, names, phone numbers and support tickets. The leak exposed personal and corporate contact information of healthcare professionals and staff.

why this severityConfirmed breach exposing personal data of over 400k accounts

first report
30 Sep 2026
last update
30 Sep 2026

What to do

Investigate the breach, notify affected users, and improve security controls

Timeline · 1

  1. 30 Sep 2026Medela data breach exposes 423,947 accounts

Sources · 1

News and write-ups

  1. 2026-09-30
    Medela data breach exposes 423,947 accounts
    Have I Been Pwned · haveibeenpwned.com/Breach/Medela

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 7 Sep 2026 · first reported 30 Sep 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-26 14:52Z · updated 2026-10-30 03:33Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Medela data breach exposes 423,947 accounts

https://gcdradar.vercel.app/incidents/medela-data-breach-exposes-423-947-accounts · AIR-2026-1517 · closed 2026-10-14

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed breach exposing personal data of over 400k accounts
- Fix status: No fix needed
- First reported: 2026-09-30 (happened 2026-09-07)
- AI role: No AI role
- Products: Medela

## Summary

Swiss medical device maker Medela suffered a breach on September 7, 2026, where attackers accessed and published over 423,000 records containing email addresses, names, phone numbers and support tickets. The leak exposed personal and corporate contact information of healthcare professionals and staff.

## What to do

Investigate the breach, notify affected users, and improve security controls

## Latest updates

- 2026-09-30: Medela data breach exposes 423,947 accounts (https://haveibeenpwned.com/Breach/Medela)

## Sources

- 2026-09-30 Have I Been Pwned: Medela data breach exposes 423,947 accounts https://haveibeenpwned.com/Breach/Medela

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Law firm IT systems Data breach impacts multiple Bay Street law firms

    Breaches & attacks · Real loss · since 30 Oct 2026

  2. closed
  3. live4.3
    Ivanti Connect Secure CVE-2026-118527: Ivanti Connect Secure Identifier Generation Flaw

    Patch now · Exploited · Patched · since 30 Oct 2026 · updated 2 Nov 2026 · CVE-2026-118527

  4. live7.0
    Ivanti Connect Secure CVE-2026-111357: Ivanti Connect Secure Authentication Bypass

    Patch now · Exploited · Patched · since 30 Oct 2026 · updated 31 Oct 2026 · CVE-2026-111357

  5. live9.8
    Palo Alto Firewalls PHP2Shell Attacks Target Palo Alto Firewalls

    Patch now · Exploited · No patch yet · since 30 Oct 2026

  6. live
    iOS Apple Alerts Users in 99 Countries Regarding Mercenary Spyware

    Breaches & attacks · Real loss · since 30 Oct 2026 · updated 10 Nov 2026