ShinyHunters claims theft of more than 7.1 million Baxter International records

Medical technology firm Baxter International disclosed a major cybersecurity incident after the ShinyHunters hacking group said that it had infiltrated the company’s internal systems and exfiltrated more than 7.1 million records.

 

Headquartered in Deerfield, Illinois, Baxter International is a global American medical technology company that develops and manufactures products for treating acute and chronic medical conditions. Its portfolio includes IV solutions, infusion pumps, clinical nutrition therapies, surgical sealants, hospital beds, patient monitoring systems, and operating-room integration equipment. Baxter also provides specialty injectable medicines, inhaled anesthetics, and drug-compounding services.

 

In a data security notification posted on its website, Baxter International revealed that it had identified unauthorised access involving certain third-party applications. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the scope and impact of the incident.

 

It also took steps to secure the affected systems and notified relevant law enforcement authorities about the incident.

 

While the investigation remains ongoing, Baxter International said there has been no impact on its manufacturing operations, customer operations, patient services, or overall business continuity. The company continues to operate normally.

 

“We have no evidence that this activity affected Baxter products, connected solutions or technologies used by customers to deliver patient care.

 

“Healthcare providers and customers can continue using Baxter products and connected solutions as intended,” the medical device manufacturer said.

 

The company said it is continuing to assess what information may have been accessed or acquired. The investigation is still ongoing, and Baxter International will share further updates as more details are confirmed.

 

“At this time, we do not expect a material impact on financials or results of operations as a result of this incident,” Baxter International added.

 

 

The ShinyHunters ransomware group claimed responsibility for the cyber attack on Baxter International listing the company as a victim on its data leak site.The group claimed to have obtained 7.1 million records from the company and threatened to release it publicly. Following unsuccessful ransom negotiations, on August 19, the hacker group released the stolen data.