2026 Baxter International — third-party app unauthorized activity; ShinyHunters claims ~7.1M Salesforce records (unverified census)
Data compromised
Company: scope of accessed/acquired information still under investigation as of Aug 13 statement; no impact claimed to products/patient care systems. ShinyHunters claims ~7.1 million Salesforce records including PII — unverified census.
Technical writeup
Company-confirmed third-party application incident — Baxter International statement August 13, 2026: unauthorized activity in certain third-party applications; forensics ongoing; no impact claimed to manufacturing, customer operations, patient services, or connected care products. ShinyHunters subsequently listed Baxter and claimed a leak of ~7.1 million Salesforce records with PII (HealthInfoSec Aug 21; HIPAA Journal Aug 26). Company has not published a matching individual census confirming the 7.1M figure. recordsAffected 7100000 from actor claim (unverified census) pending Baxter/HHS tally; companyConfirmed true for the unauthorized-activity determination.
Root cause
Unauthorized activity involving certain third-party applications (company statement); ShinyHunters claims Salesforce data theft and published ~7.1M records