Data breach

Dexcom

San Diego, United States2 sources

ConfirmedDexcom notified the California Attorney General of a data breach on 13 Nov 2026. The cause was not stated.

Dexcom, Inc. notified the California Attorney General of a data breach

Dexcom, Inc. notified the California Attorney General of a data breach on 13 Nov 2026. The cause was not stated.

See it on the live map Am I affected?

San Diego, United States. Placed at the organisation's headquarters.

Sector: Healthcare
Records affected: 3.3K GB, claimed by the attackers
Claimed by: Redact
First reported: 13 Nov 2026
Latest source: 13 Nov 2026

What is known

Confirmed

No confirmed figure

Claimed

3,300 GB

Claimed by Redact. Not verified.

Data involved

Data types not stated

Cause

Cause not stated

Attack: 2 Nov 2026
Claimed: 10 Oct 2026
Disclosed: 13 Nov 2026
First seen by Black Shard: 9 Nov 2026

Filings

California Attorney General13 Nov 2026Breach notice

How it unfolded

10 Oct 2026
Claimed by Redact on its leak site
13 Nov 2026
Breach notice with the California Attorney General

34 days from claim to notice.

Sources

California Attorney GeneralPrimary source13 Nov 2026California Attorney General breach notice sb24-632867
Leak-site claim by Redact, tracked by RansomLook10 Oct 2026Listed on Redact's leak site.

Status timeline

10 Oct 2026
Leak-site claim by Redact, tracked by RansomLook
10 Oct 2026
Status: claimed
13 Nov 2026
California Attorney General, primary source
13 Nov 2026
Status: confirmed

Attacker group

Redact
Claimed by the group on its leak site, 10 Oct 2026.

What to do

If you have an account, change that password, and anywhere you reused it.
Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
If payment cards were involved, watch statements and ask your bank for a new card.
If government ID or social security numbers were involved, consider a credit freeze.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 95%

The place 65%

2 independent sources. Placed at the organisation's headquarters.

Not known yet

Data involved

Update log

9 Nov 2026First seen.
14 Nov 2026Status changed from claimed to confirmed.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.

Data breach

Dexcom

San Diego, United States2 sources

ConfirmedDexcom notified the California Attorney General of a data breach on 13 Nov 2026. The cause was not stated.

Dexcom, Inc. notified the California Attorney General of a data breach

Dexcom, Inc. notified the California Attorney General of a data breach on 13 Nov 2026. The cause was not stated.

See it on the live map Am I affected?

San Diego, United States. Placed at the organisation's headquarters.

Sector: Healthcare
Records affected: 3.3K GB, claimed by the attackers
Claimed by: Redact
First reported: 13 Nov 2026
Latest source: 13 Nov 2026

What is known

Confirmed

No confirmed figure

Claimed

3,300 GB

Claimed by Redact. Not verified.

Data involved

Data types not stated

Cause

Cause not stated

Attack: 2 Nov 2026
Claimed: 10 Oct 2026
Disclosed: 13 Nov 2026
First seen by Black Shard: 9 Nov 2026

Filings

California Attorney General13 Nov 2026Breach notice

How it unfolded

10 Oct 2026
Claimed by Redact on its leak site
13 Nov 2026
Breach notice with the California Attorney General

34 days from claim to notice.

Sources

California Attorney GeneralPrimary source13 Nov 2026California Attorney General breach notice sb24-632867
Leak-site claim by Redact, tracked by RansomLook10 Oct 2026Listed on Redact's leak site.

Status timeline

10 Oct 2026
Leak-site claim by Redact, tracked by RansomLook
10 Oct 2026
Status: claimed
13 Nov 2026
California Attorney General, primary source
13 Nov 2026
Status: confirmed

Attacker group

Redact
Claimed by the group on its leak site, 10 Oct 2026.

What to do

If you have an account, change that password, and anywhere you reused it.
Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
If payment cards were involved, watch statements and ask your bank for a new card.
If government ID or social security numbers were involved, consider a credit freeze.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 95%

The place 65%

2 independent sources. Placed at the organisation's headquarters.

Not known yet

Data involved

Update log

9 Nov 2026First seen.
14 Nov 2026Status changed from claimed to confirmed.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.

What is known

Filings

How it unfolded

Sources

Status timeline

Attacker group

What to do

How sure we are

Update log

Other incidents linked to Redact

Under attack? Call the incident line.

What is known

Filings

How it unfolded

Sources

Status timeline

Attacker group

What to do

How sure we are

Update log

Other incidents linked to Redact

Under attack? Call the incident line.