Confirmed breach

Dexcom data breach

USUnited States · Dexcom, Inc.

Dexcom (United States) notified the California Attorney General of a data breach on 13 November 2026.

People affected: Not reportedno count given yet
Reported: 13 November 2026Official notice
Breach began: 2 November 2026by the notice

Found to notice: 11 days (found 2 November 2026, by the company’s letter)

What was exposed

The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.

How it happened

How: Phishing an unauthorized third party gained access through social engineering. source

What the letter says

Found: On November 2, 2026, we determined that some of your information may have been involved in an incident involving unauthorized access to certain employee accounts.
Exposed: the information that may have been involved includes one or more of the following: your name, Social Security number, date of birth, and government identification information.
Offered: we are offering you a complimentary, two-year membership through Kroll at no cost to you

Got a letter or email about this breach? Check it is real →

Read the letter (PDF), as filed with the California Attorney General (and 1 more document on the notice).

Sources 1

Official noticeCalifornia Attorney General13 November 2026

Official notices are read by code from the regulator’s own register. More notices to California. · Corrections and changes

If Dexcom had your data

Look for Dexcom, Inc.’s own notice or letter: it should say what of yours was involved. Keep it.
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does. If Dexcom, Inc. has a password of yours, change it now to be safe.
Expect scams that use your details: calls, texts or emails pretending to be Dexcom, Inc., your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

What to do after a data breach →

Use Dexcom? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the Dexcom breach

Was Dexcom hacked?

Dexcom (United States) notified the California Attorney General of a data breach on 13 November 2026. How it happened, by the sources: phishing.

What data was exposed in the Dexcom breach?

The notices and reports so far do not say what was exposed. This page is updated when they do.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. The letter it filed is on this page. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Dexcom data breach settlement?

No settlement open for claims is on record for Dexcom as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.

Is a letter, email or text about the Dexcom breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Dexcom’s own site, or check the letter here.

More breaches in United States

Every breach in United States →

Data breach settlements open for claims

Not about Dexcom: settlements over other US data breaches that people can still claim money from.

Mental Health Association file by 19 November 2026
Wayne Memorial Hospital file by 7 December 2026
Washington Gastroenterology file by 10 January 2027

Every open settlement →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.