Fertility, Genetic & Wearables · Wearables, fitness & GPS devices (Garmin Connect) · Data breach
Garmin
Headline
In July 2020 a WastedLocker ransomware attack - malware tied to the U.S.-sanctioned Evil Corp group - took Garmin Connect, the website, call centers, flyGarmin and pilot apps offline for several days…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
In July 2020 a WastedLocker ransomware attack - malware tied to the U.S.-sanctioned Evil Corp group - took Garmin Connect, the website, call centers, flyGarmin and pilot apps offline for several days; pilots could not download aviation navigation data. Garmin said it had 'no indication' customer data was affected. A $10 million ransom demand and a ransom payment were reported by anonymous sources but never confirmed by Garmin. The episode showed that a fitness tracker's health and location data sit on a cloud the user cannot reach when the company is down.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-10-16
Primary source. www.bleepingcomputer.com/news/security/garmin-outage-caused-by-confirmed-wastedlocker-ransomware-attack/ — Unverified - heuristic first draft.
Terms
Arbitration
Not verified this pass - terms page body did not load (JS-rendered).
Data sharing
Not verified this pass - privacy policy body did not load (JS-rendered). Company statement in 2020: activity/health data collected during outage stayed on devices and synced later.
Fees and billing
Not verified this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Garmin Ltd., Muhlentalstrasse 36/38, 8200 Schaffhausen, Switzerland (SEC EDGAR business address)
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| News report · 2020-07-24 www.bleepingcomputer.com/news/security/garmin-outage-caused-by-confirmed-wastedlocker-ransomware-attack/ | whole row | Unassigned | confirmed | “Garmin has no indication that this outage has affected your data” Quote basis: not recorded. |
| Wikipedia · 2026-10-16 en.wikipedia.org/wiki/Garmin | whole row | Unassigned | confirmed | “On July 23, 2020, Garmin shut down its call centres, website and some online services” Quote basis: not recorded. |
| SEC EDGAR submissions · 2026-10-16 data.sec.gov/submissions/CIK0001121788.json | whole row | Unassigned | confirmed | “MUHLENTALSTRASSE 36/38” Quote basis: not recorded. |
| SEC Form 10-K (FY2025) · 2026-02-18 www.sec.gov/Archives/edgar/data/1121788/000119312526056028/grmn-20251227.htm | whole row | Unassigned | confirmed | “ransomware or other cybersecurity incidents” Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://www.garmin.com/en-US/privacy/global/policy/ | Not fetched yet | NOT CONFIRMED |
| Terms of service https://www.garmin.com/en-US/legal/terms-of-use/ | Not fetched yet | NOT CONFIRMED |
| Website https://www.garmin.com | Not fetched yet | — |
| Primary source https://www.bleepingcomputer.com/news/security/garmin-outage-caused-by-confirmed-wastedlocker-ransomware-attack/ Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No comprehensive state privacy statute on file for Switzerland / KS