Intuitive Surgical Reports Phishing Breach, Customer and Employee Data Accessed Shares of Intuitive Surgical dropped as much as 4% on Monday after the company revealed a targeted phishing attack led to unauthorized access of internal IT business applications. The breach, discovered by the company, prompted an immediate response to secure affected systems. The incident involved an employee’s compromised credentials, granting the attacker access to customer business and contact details, as well as corporate and employee data. However, Intuitive clarified that the breach did not impact its da Vinci or Ion robotic surgical systems, digital platforms, or manufacturing operations. The company’s network segmentation separating internal IT, manufacturing, and clinical systems prevented further exposure. Hospital customer networks, managed independently by their own IT teams, also remained unaffected. Intuitive confirmed no disruption to operations or customer support, as its robotic systems operate under distinct security protocols. The company has launched an investigation, reviewed security measures, and reinforced employee training while notifying data privacy regulators and affected customers. The probe remains ongoing, with updates promised as needed.

Medtronic Confirms Unauthorized Access to Corporate IT Systems in Cybersecurity Incident Medtronic, a leading medical technology company, disclosed that an unauthorized party accessed data within certain corporate IT systems. The breach, detected during routine monitoring, prompted an immediate response, including containment measures and the activation of incident response protocols. The company has engaged cybersecurity experts to investigate and remediate the incident while working to determine whether personal information was compromised. Medtronic emphasized that the breach did not affect product functionality, patient safety, customer connections, manufacturing, or distribution operations. Its corporate IT networks remain separate from systems supporting medical devices, production, and hospital networks, minimizing potential disruptions. The company does not anticipate a material impact on its business or financial performance but continues to assess security enhancements. This incident follows recent cyberattacks on other major medtech firms. In February 2026, Iranian-backed hacktivists executed a "wiper attack" against Stryker, erasing data in retaliation for U.S. and Israeli actions. Shortly after, Intuitive Surgical reported a breach stemming from a phishing incident that exposed internal IT applications. At this time, there is no evidence linking these breaches to a coordinated campaign or shared motives.

Intuitive Surgical Suffers Cyberattack, Exposing Sensitive Data of Korean Medical Professionals Intuitive Surgical, the U.S.-based leader in surgical robotics, confirmed a cyberattack that compromised the personal and professional data of Korean medical staff. The breach, detected on May 9, involved unauthorized access to the company’s business management network via an employee’s account, leading to the extraction of sensitive customer information. The exposed data includes names, hospital affiliations, contact details, areas of specialization, training records, performance results, and equipment usage history information collected over Intuitive’s two-decade dominance in Korea’s surgical robot market. The company notified affected individuals via email on May 12, acknowledging the incident as a suspected hacking attempt. Intuitive Surgical, known for its da Vinci robotic surgery systems, holds a near-monopoly in Korea, with over 200 systems installed across all 47 tertiary hospitals. More than 2,000 Korean medical professionals have undergone da Vinci training, suggesting a widespread impact. The breach does not affect the safety or operation of the robotic systems, according to the company, but the full scope of the exposure remains undisclosed. Medical staff have raised concerns over the necessity of the collected data and the potential for misuse, including leaks to competitors or malicious actors. Industry observers warn the incident could erode trust in Intuitive’s security practices, potentially weakening its market position. Regulatory scrutiny is also expected, with calls for accountability and compensation for affected individuals. Intuitive Surgical Korea stated it is cooperating with authorities and will provide updates as the investigation progresses. The breach highlights vulnerabilities in medical device companies’ data security amid growing reliance on cloud and network systems.

Phishing Attack Targets Intuitive, Exposes Internal Biotech Data Intuitive, a leading biotechnology company specializing in surgical robotics, confirmed it fell victim to a targeted phishing attack that compromised internal IT business applications. The threat actor gained unauthorized access by exploiting an employee’s credentials, highlighting the growing sophistication of cyber threats against high-profile personnel. The breach was contained, with no disruption to the company’s operations or customer networks, thanks to segmented infrastructure. While the full scope of compromised data remains under investigation, Intuitive has begun notifying affected customers and will provide updates as needed. The incident underscores the escalating risks faced by executives and critical employees, where traditional security measures struggle to keep pace with evolving attack methods. Modern defense strategies increasingly rely on intelligence-driven approaches and AI-enhanced incident response to detect and mitigate threats more effectively. No further details on the attacker’s identity or motives have been disclosed. The company continues its investigation to assess the full impact of the breach.