Minimed Distribution Group Breach
Date: February, 2023Minimed Distribution Group is a medical development and distribution company for insulin pumps and other specialized equipment specifically for patients with diabetes. The company works to provide patients with the equipment they need and works closely with doctors and individuals. The company recently suffered from a data breach that gave away more user data than was intended.
What Was the Breach?
- Email Address
- Phone Number
- App Username
- App Password
- Medtronic Diabetes User Identifier
How Did the Breach Occur?
Minimed Distribution Group employees installed analytics software in its iOS and Android applications to track user actions in the app and to monitor for any usage errors and potential issues. The analytics software was transmitting more information than intended to Google and served as a data breach for customers using the software without knowledge of what was happening to their data.
When Did This Breach Occur?
The Minimed Distribution Group determined on February 13, 2023, that some of its app-based customers were having their data disclosed to Google without their knowledge. This information was being shared because of analytics software installed on the system. While the data wasn't highly personal and didn't include financial information, it was still a breach of privacy that could give Google more information than you want the company to have.
Who Does the Breach Impact?
Any patients and customers using the InPep App by Medtronic after September 2020 could have had their information shared with Google. The information isn't likely to cause any harm, and you likely don't have to take any action to protect yourself, but you should be aware that some of your personal data were shared with Google and that the company could use the information for advertising purposes.
How Many Files Does the Breach Affect?
No specific files were impacted by this data breach. Instead, the Medtronic Diabetes app shared some user information via the analytics tools configured to run during visits by users.
Recent Breaches
Cisco Duo Breach
Cisco Duo is an access security provider that offers solutions for small business and commercial control products, including multi-factor authentication (MFA), single sign-on, and access control services....
AT&T Breach
American Telephone and Telegraph Company (AT&T) is the fourth-largest telecommunications provider, behind Verizon, Comcast, and China’s state-funded communications solution...
Fujitsu Limited Breach
Fujitsu Limited is the world’s sixth-largest IT service provider. Based in the Minato City ward of Tokyo, Japan, Fujitsu offers various technology solutions for personal and commercial use...
Cybersecurity and Infrastructure Security Agency Breach
The CISA collaborates with other government agencies to notify victims of breaches and respond to threats. These include the Federal Bureau of Investigation, the Multi-State Information Sharing & Analysis...
Roku Inc. Breach
Roku is a global streaming and entertainment organization. It offers solutions for direct streaming, live channels, music, niche channel entertainment, smart home devices, travel technology, audio options,...