Intuitive Surgical suffers phishing attack, customer data stolen

Robotic surgery pioneer Intuitive Surgical has disclosed a data breach following a successful phishing attack that compromised employee credentials and exposed customer information.

The company, known for its da Vinci surgical systems and Ion endoluminal platforms, said unauthorized intruders gained access to internal IT business applications after stealing an employee's login credentials. The attack appears to have targeted business systems rather than the robotic surgical platforms themselves.

According to Intuitive's statement, the breach resulted in the theft of customer business and contact information, along with employee and corporate data. However, the company emphasized that its core operations remained unaffected.

"There has been no impact on our operations or the work we do to support our customers," Intuitive stated. "Our robotic systems have their own security protocols and operate independently of our internal business network."

The company attributed this operational resilience to its network segmentation strategy. Intuitive explained that its infrastructure supporting internal IT business systems, manufacturing operations, and digital products remains separate from the systems controlling its surgical platforms.

"Because of this network segmentation, our da Vinci, Ion, and digital platforms were not affected by the breach, and continue to be safe and operational," the statement read. The company also noted that hospital customer networks remain separate and are secured and managed by customers' IT teams.

Upon discovering the intrusion, Intuitive said it took "immediate action" to contain the breach and launched an ongoing investigation. The company has notified data privacy regulators and pledged to provide updates as the investigation progresses.

The timing of this breach is notable, coming shortly after medical technology company Stryker disclosed a cyberattack last week. Stryker's breach involved unauthorized access to its internal Microsoft environment, with a hacktivist group called Handala claiming responsibility.

Security experts point out that phishing remains one of the most effective methods for cybercriminals to gain initial access to corporate networks. Even sophisticated technology companies remain vulnerable when a single credential is compromised.

"Phishing remains effective because it targets people rather than technology," said Ensar Seker, chief information security officer at SOCRadar. "Security controls around software vulnerabilities have improved dramatically over the past decade, but social engineering continues to exploit human trust, urgency, and routine workflows."

The breach highlights the ongoing challenge of balancing operational efficiency with security in healthcare technology. While Intuitive's network segmentation appears to have protected its critical surgical systems, the exposure of customer and employee data still represents a significant security incident that will likely require notification to affected parties and potential regulatory scrutiny.

As of publication, no group had claimed responsibility for the Intuitive attack, and the company has not disclosed when the attack occurred or when it was discovered. The full scope of the data exposure and its potential consequences remain under investigation.