Medtronic, the world’s largest medical device manufacturer, confirmed unauthorized access to corporate IT systems following claims by threat actor ShinyHunters of stealing over 9 million PII records and terabytes of internal data. Medtronic states that patient safety systems, medical devices, and manufacturing operations were not disrupted, attributing this to network segmentation between corporate IT and operational environments. The breach carries significant regulatory exposure under HIPAA and SEC cybersecurity disclosure rules, and an active extortion campaign is ongoing.