423,947 Medela Accounts Exposed in Data Breach
The breach dates to September 7, 2026 and was added to Have I Been Pwned on September 30, 2026. Exposed data includes email addresses, employers, job titles.
Key points
- 423,947 Medela accounts exposed.
- Breach dated September 7, 2026.
- Exposed: Email addresses, Employers, Job titles.
A data breach affecting Medela has exposed 423,947 accounts, according to the breach-notification service Have I Been Pwned, which added the incident to its database on September 30, 2026.
At a glance
- Organisation
- Medela
- Accounts affected
- 423,947
- Breach date
- September 7, 2026
- Added to HIBP
- September 30, 2026
- Verified
- Yes
- Data exposed
- Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
What happened?
Have I Been Pwned describes the incident as follows: In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign . The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including names, physical addresses and phone numbers, with some records also containing associated support tickets.
What data was exposed?
- Email addresses
- Employers
- Job titles
- Names
- Phone numbers
- Physical addresses
- Salutations
- Support tickets
Have I Been Pwned lists this breach as verified.
What should you do?
- Check whether your email address is in the breach at haveibeenpwned.com.
- Change your Medela password, and any other account where you reused it.
- Turn on two-factor authentication wherever it is offered.
- Be alert for phishing emails that use the exposed details to look convincing.
Frequently asked questions
How many accounts were affected in the Medela breach?
423,947 accounts, according to Have I Been Pwned.
What data was exposed in the Medela breach?
Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses.
How do I check if I was affected by the Medela breach?
Search for your email address at haveibeenpwned.com, then change the password and enable two-factor authentication.
