Intuitive Surgical

Summary

Intuitive Surgical disclosed a phishing incident that compromised customer and employee data. The company later reported that no fraud or identity theft had been linked to the breach and that there was no evidence the accessed data was misused. It also noted that the incident did not affect the safety or functionality of its surgical systems.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

In March, during the same week that Stryker disclosed a cyberattack that disrupted its manufacturing and shipping, Intuitive Surgical announced that it had experienced a phishing incident. The phishing attack resulted in unauthorized access to customer and employee data. The company disclosed the incident publicly at that time, though it did not specify the exact categories of information that were accessed. Several weeks later, in June, Intuitive Surgical issued an update regarding the outcome of the incident. In that update, the company stated that no reports of fraud or identity theft had been linked to the compromised data. It also noted that there was no indication the accessed information had been misused.

The June update emphasized that no reports of fraud or identity theft had arisen from the incident and that there was no indication the accessed data had been misused. Intuitive Surgical did not indicate any observed misuse of the data in its statement. The update did not provide details about any specific remedial actions taken after the incident. The source material does not include information about notifications to affected individuals or offers of credit monitoring services. The confirmed facts are that a phishing incident compromised customer and employee data and the company’s June update reported no evidence of fraud, identity theft, or data misuse.

Sources

Sources available to members: 1 source.