Medela data breach: what leaked and what to do
Medela (medela.com) had a data breach on 2026-09-07 affecting 423,947 accounts.
!Personal data leaked !Sensitive
Added to the catalogue 30 Sept 2026.
What leaked
- Email addresses
- Employers
- Job titles
- Names
- Phone numbers
- Physical addresses
- Salutations
- Support tickets
What happened
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including names, physical addresses and phone numbers, with some records also containing associated support tickets.
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the Medela breach?
Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Salutations, Support tickets
When did the Medela breach happen?
The breach date is 2026-09-07; it was added to the public catalogue on 2026-09-30.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.