type: incident · created: 2026-08-27 · updated: 2026-08-27 · tags: [incident, breach, data-leak, extortion, sector-healthcare] · confidence: medium · affected_sectors: [healthcare] · au_impact: true
ShinyHunters Leaks 7.1 Million Records Claimed from Medical-Device Maker Baxter International
Baxter International, a manufacturer of renal-care, IV and infusion, surgical and patient-monitoring devices, disclosed on 13 August 2026 unauthorised activity in certain third-party applications. The extortion group ShinyHunters claimed the incident on 14 August and on 19 August released roughly 7.1 million alleged Salesforce records, some containing personally identifiable information. Baxter has not acknowledged the data-theft scope or that all records relate to patients.
| Attribute | Detail |
|---|---|
| Date | 2026-08-13 detected → 2026-08-19 released |
| Actor | ShinyHunters |
| Status | Probable breach (victim confirmed incident, not data-theft scope) |
| Source | HIPAA Journal — Tier 2/4 High |
ShinyHunters is among the most active extortion groups, with a run of healthcare victims in 2026 (OneMedical, DentaQuest, Medtronic, iRhythm).