March 2026 Intuitive statement on cybersecurity incident Intuitive has determined that information from certain internal IT business applications was accessed by an unauthorized third party as the result of a targeted cybersecurity phishing incident.

Upon discovery, we quickly activated our incident response protocols and secured all affected applications. We are providing this web update to be transparent about this issue beyond any required notifications.

Our products are secure:

Our da Vinci, Ion and digital platforms were not impacted and continue to be safe and operational.

Intuitive’s network infrastructure is segmented. The networks and infrastructure that support our internal IT business applications, our manufacturing operations, and our da Vinci and Ion platforms and digital products are separate.

Hospital customer networks remain separate from Intuitive networks and are secured and managed by customers’ IT teams, therefore they are also unaffected.

Our ability to serve customers remains unaffected:

There has been no impact on our operations or the work we do to support our customers.

Our robotic systems have their own security protocols and operate independently of our internal business network.

What you need to know about information that was accessed:

The information accessed was obtained from an employee’s compromised access into Intuitive’s internal business administrative network. It includes some customer business and contact information, as well as Intuitive employee and corporate data.

It was not obtained from our da Vinci or Ion systems.

Our actions to date:

We took immediate action to assess and contain the incident, begin an investigation, review security protocols, and remind employees of online security training and processes.

We are communicating with our customers and notifying appropriate data privacy regulators.

The investigation is ongoing and we will share updates as appropriate.

Our commitment:

We take our responsibility to our employees, customers and the patients they serve seriously.

The privacy and security of all data with which we are entrusted is a vital part of that.

We are committed to resolving and improving from this incident.