2026 Medela — ShinyHunters leak-site claim; HIBP 423,947 accounts (company confirmation not attached)
Data compromised
Per the HIBP listing, 423,947 unique accounts. Details of fields not verified. Medela has not publicly confirmed the incident in the sources reviewed.
Technical writeup
HIBP listing added 30 Sep 2026 (423,947 unique accounts). Part of a ShinyHunters extortion campaign listed on Sep 7, 2026 per SOCRadar. SOCRadar labels the claim as alleged. Medela has not confirmed the incident in sources reviewed, so companyConfirmed false. Same treatment as the Neogen and Sharecare ShinyHunters entries. recordsAffected 423947 (HIBP unique accounts).
Root cause
Unknown. ShinyHunters listed Medela in its extortion campaign; no attack method published.