Medtronic reported on Friday that an unauthorized party accessed data in certain corporate IT systems.
Medtronic has not identified any impact on its products, connections to customers, and manufacturing and distribution operations. There has also been no impact on patient safety or the company’s ability to meet patients’ needs.
“The networks that support our corporate IT systems, our products and our manufacturing and distribution operations are separate,” the medtech company said in a statement. “Hospital customer networks remain separate from Medtronic IT networks and are secured and managed by customers’ IT teams.”
Medtronic is working to determine if any personal information may have been accessed.
The company does not currently expect the incident to have a material impact on its business or financial results, according to a filing with the Securities and Exchange Commission.
After identifying the cybersecurity breach, Medtronic took steps to contain the incident, activated its incident response protocols and engaged cybersecurity experts to support the investigation and remediation efforts.
Medtronic’s data breach is the latest cybersecurity incident in the medtech industry. In March, a cyberattack hit Stryker’s Microsoft environment, taking down ordering, shipping and manufacturing. It took weeks for operations to return to normal.
Intuitive Surgical reported a phishing incident the same week as Stryker’s cyberattack. Intuitive said an unauthorized third party accessed information including customer business and contact information, as well employee and corporate data. The surgical robotics company said on an earnings call last week that the incident had been contained, and it did not have a significant impact on first-quarter financial results.
