2026 Tandem Diabetes Care — Phishing, 140k patients
Data compromised
Patient data; clinical therapy data; SSNs (limited)
Technical writeup
San Diego medical device manufacturer. Phishing attack; several employee email accounts compromised Jan 17–20, 2026. Accounts contained patient data: product usage, clinical diabetes therapy data, SSNs (limited). ~140k patients notified. Free credit monitoring; bolstering email security.
Root cause
Phishing; employee email compromise