cybernews.com Dexcom Faces Class Action Over Data Breach by ShinyHunters
Article Content
- •Dexcom's data breach involved personal and medical information of over 2.8 million customers.
- •ShinyHunters threatened to publish stolen data unless Dexcom responded by the deadline.
- •The lawsuit alleges multiple security failures and violations of HIPAA regulations.
On October 13, 2026, a class action lawsuit was filed against Dexcom Inc. in California, alleging that weak data security allowed hackers to steal personal and medical information of customers and employees. The cybercriminal group ShinyHunters claimed responsibility for the breach, threatening to publish the stolen data unless contacted by Dexcom. The lawsuit cites various security failures, including inadequate employee training and violations of HIPAA regulations. Dexcom disclosed on October 10 that unauthorized access occurred due to voice phishing, but it has not confirmed if this incident is linked to ShinyHunters. The stolen data reportedly includes names, birthdates, driver's license numbers, financial information, and medical records. The lawsuit claims Dexcom failed to notify affected individuals promptly, causing them distress and anxiety.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Dexcom in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What data was compromised?
How did the breach occur?
What should affected individuals do?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…