Medical device maker Medtronic said a cyberattack that struck its computer systems last week was confined to the network supporting its corporate information technology systems and did not disrupt its devices or the firm's ability to meet patient needs.
In a statement disclosed on Friday, the company said the intrusion did not affect its products, patient safety, manufacturing or distribution operations. Medtronic said the IT network that was impacted is separate from the systems that support its products, manufacturing and distribution functions.
Medtronic added that the incident is not expected to materially affect its business or financial results. The company said it has activated response plans and engaged cybersecurity experts to help contain the attack.
The company said the incident highlights a broader increase in cyber risk facing medical device makers, with attacks able to interrupt critical health services and raise concerns about patient safety and the security of sensitive data.
Last month, peer Stryker reported a destructive cyberattack that delayed surgeries for patients and caused widespread disruption to its business. That incident hampered Stryker's ability to process orders, manufacture products and ship them to customers.
An Iranian-linked hacking group called Handala had claimed responsibility for the Stryker attack, saying it was in retaliation for a strike on a girls' school in Minab, southern Iran.
Medtronic said it had initiated established incident response procedures and brought in outside cybersecurity specialists to assist with containment. The company did not immediately respond to a request for comment.
Context and implications
The company emphasized that the affected corporate IT systems are kept separate from the networks that run its products, manufacturing lines and distribution channels. Medtronic reiterated that patient safety and ongoing product supply were not compromised by the incident.
While Medtronic described the impact as limited and not expected to be material to financial results, the disclosure comes amid heightened attention to cybersecurity across the medical device sector after recent disruptive incidents at peers.