Medela - 423,947 breached accounts

In September 2026, Swiss medical device company Medela was the target of a ShinyHunters “pay or leak” extortion campaign . The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including names, physical addresses and phone numbers, with some records also containing associated support tickets.