A ransomware group calling itself Falcon claims to have obtained data from Globus Medical, according to a listing on the group’s own leak site dated August 30, 2026. This claim was tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, the claim is unverified — Globus Medical has not confirmed an incident, and no regulator has issued any related disclosure.
What we know — and don’t
- A group calling itself Falcon posted a claim referencing Globus Medical on its leak site, with a claimed date of August 30, 2026.
- Globus Medical operates in the healthcare sector, specifically medical device and surgical technology.
- The specific data types the group claims to have accessed have not been disclosed or confirmed by any party.
- Globus Medical has not issued a public statement confirming or denying this claim as of this writing.
- No regulatory filing or breach notification tied to this claim has been identified at this time.
What should you do if you have an account with this company?
- Change your password for any account associated with Globus Medical, and avoid reusing that password elsewhere.
- Enable two-factor authentication (2FA) wherever it is offered, particularly for accounts tied to health or medical services.
- Be cautious of unexpected emails, texts, or calls referencing Globus Medical or medical services, especially those asking for personal or payment details — these could be phishing attempts capitalizing on this claim.
- Monitor your financial and medical accounts for unfamiliar activity in the coming weeks.
- Consider using a service like a service like Aura or LifeLock to monitor for identity misuse, especially if you have provided sensitive personal or health information to this company in the past.
- Keep records of any suspicious communications in case they are needed later for reporting or verification purposes.
BreachLetter will update this page if Globus Medical confirms this incident, if new details emerge from credible sources, or if the matter is officially reported to regulators.