Ransomware.live listed Baxter International, Inc. in connection with a ShinyHunters extortion post dated 2026-08-14. The post said the group had compromised over 7.1 million Salesforce records and set a 17 Aug 2026 deadline, but the incident has not been publicly confirmed by Baxter in the sources reviewed.
The only data type described in the source is some PII contained in Salesforce records. The source does not identify SSNs, medical records, financial account data, or specific states affected, and it does not provide a consumer-notification date or regulator-notification date.
This information is based on a public threat listing and may change if Baxter, regulators, or court filings later provide more detail.