Intuitive Surgical: Intuitive Surgical Hack Exposes Korean Medical Staff Data

Intuitive Surgical Suffers Cyberattack, Exposing Sensitive Data of Korean Medical Professionals

Intuitive Surgical, the U.S.-based leader in surgical robotics, confirmed a cyberattack that compromised the personal and professional data of Korean medical staff. The breach, detected on May 9, involved unauthorized access to the company’s business management network via an employee’s account, leading to the extraction of sensitive customer information.

The exposed data includes names, hospital affiliations, contact details, areas of specialization, training records, performance results, and equipment usage history information collected over Intuitive’s two-decade dominance in Korea’s surgical robot market. The company notified affected individuals via email on May 12, acknowledging the incident as a suspected hacking attempt.

Intuitive Surgical, known for its da Vinci robotic surgery systems, holds a near-monopoly in Korea, with over 200 systems installed across all 47 tertiary hospitals. More than 2,000 Korean medical professionals have undergone da Vinci training, suggesting a widespread impact. The breach does not affect the safety or operation of the robotic systems, according to the company, but the full scope of the exposure remains undisclosed.

Medical staff have raised concerns over the necessity of the collected data and the potential for misuse, including leaks to competitors or malicious actors. Industry observers warn the incident could erode trust in Intuitive’s security practices, potentially weakening its market position. Regulatory scrutiny is also expected, with calls for accountability and compensation for affected individuals.

Intuitive Surgical Korea stated it is cooperating with authorities and will provide updates as the investigation progresses. The breach highlights vulnerabilities in medical device companies’ data security amid growing reliance on cloud and network systems.

Source: https://en.sedaily.com/culture/2026/03/15/intuitive-surgical-hack-exposes-korean-medical-staff-data

Intuitive cybersecurity rating report: https://www.rankiteo.com/company/intuitivesurgical

"id": "INT1773591912",
"linkid": "intuitivesurgical",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Over 2,000 Korean medical '
                                              'professionals',
                        'industry': 'Medical Device / Surgical Robotics',
                        'location': 'U.S. (Korea-specific data affected)',
                        'name': 'Intuitive Surgical',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized access via employee account',
 'customer_advisories': 'Notified affected individuals via email on May 12',
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (personal and professional data)',
                 'type_of_data_compromised': ['Names',
                                              'Hospital affiliations',
                                              'Contact details',
                                              'Areas of specialization',
                                              'Training records',
                                              'Performance results',
                                              'Equipment usage history']},
 'date_detected': '2024-05-09',
 'date_publicly_disclosed': '2024-05-12',
 'description': 'Intuitive Surgical, the U.S.-based leader in surgical '
                'robotics, confirmed a cyberattack that compromised the '
                'personal and professional data of Korean medical staff. The '
                'breach involved unauthorized access to the company’s business '
                'management network via an employee’s account, leading to the '
                'extraction of sensitive customer information. The exposed '
                'data includes names, hospital affiliations, contact details, '
                'areas of specialization, training records, performance '
                'results, and equipment usage history.',
 'impact': {'brand_reputation_impact': 'Potential erosion of trust in '
                                       'Intuitive’s security practices',
            'data_compromised': 'Personal and professional data of Korean '
                                'medical professionals',
            'identity_theft_risk': 'High (personal and professional data '
                                   'exposed)',
            'legal_liabilities': 'Expected regulatory scrutiny and calls for '
                                 'accountability',
            'systems_affected': 'Business management network'},
 'initial_access_broker': {'entry_point': 'Employee account'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Incident description'}],
 'regulatory_compliance': {'legal_actions': 'Expected regulatory scrutiny'},
 'response': {'communication_strategy': 'Notified affected individuals via '
                                        'email on May 12',
              'law_enforcement_notified': 'Cooperating with authorities'},
 'title': 'Intuitive Surgical Suffers Cyberattack, Exposing Sensitive Data of '
          'Korean Medical Professionals',
 'type': 'Data Breach'}