Back Scworld

Intuitive Surgical confirms phishing-related data breach | brief

Scworld • March 16, 2026

U.S. surgical robotics firm Intuitive Surgical had its customer and employee data compromised following a phishing attack against one of its employees, reports MedTech Dive .

Attackers leveraged stolen employee credentials to infiltrate Intuitive Surgical's internal business administrative network, enabling the theft of customers' and business details, employee information, and corporate files, said the company in a statement on its website. Neither the company's Ion, da Vinci, and digital platforms nor hospital customer networks have been impacted by the incident.

"There has been no impact on our operations or the work we do to support our customers. Our robotic systems have their own security protocols and operate independently of our internal business network," said Intuitive.

Such a disclosure comes just days after Michigan-based medical device maker Stryker reported having its manufacturing, shipping, and order processing activities disrupted following an attack against its Microsoft environment by Iran-linked threat operation Handala, which claimed to have pilfered 50 TB of data from the firm's systems.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Intuitive Surgical Faces Data Breach from Phishing Attack Intuitive Surgical has reported a data breach resulting from a phishing attack that compromised an employee's login credentials. This incident allowed unauthorized access to certain internal IT business applications, leading to the theft of customer and employee data. The company has not disclosed the specific date of the attack or its detection. However, it confirmed that its core products, including the da Vinci and Ion surgical systems, were not affected. The breach was contained swiftly, and the company activated its incident response protocols immediately upon discovery. Intuitive has notified data privacy regulators and is currently investigating the incident. The attack follows a similar breach at Stryker, another medical device company, which highlights ongoing risks in the healthcare sector. The company emphasized that hospital networks using its robotic systems remain isolated from its internal network. 7 sources 52

Extracted Entities

Intuitive Surgical confirms phishing-related data breach | brief

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (2)

Countries (1)

MITRE ATT&CK (2)