Medtronic Inc. Data Breach Notice (Washington Attorney General)

The notice you received from Medtronic means that your name, Social Security number, full date of birth, and medical information are now in the hands of unknown parties. These four pieces of information together create a permanent identity-theft risk that cannot be cancelled like a credit card.

77 days passed between the breach and the notification

Medtronic reported the incident to the Washington Attorney General on June 29, 2026. The filing states the breach itself occurred on April 13, 2026. That 77-day gap is the single most concrete fact in the public record. During those eleven weeks the exposed data could have been accessed, copied, and moved without any public indication that anything had gone wrong.

The filing lists five categories involved in the April 13 incident: name, Social Security number, full date of birth, medical information, and other. No passwords were exposed. The record does not state how the breach happened, whether the data left Medtronic’s systems, or who had access during those 77 days.

What a Social Security number and date of birth actually enable

With your name, SSN, and exact date of birth an identity thief can open new credit accounts, file fraudulent tax returns, apply for government benefits, or create synthetic identities. These three pieces do not expire. Unlike a stolen credit card number that can be replaced in days, your SSN and date of birth remain valid for the rest of your life.