Cybersecurity Risk Management and Strategy Disclosure	12 Months Ended
Apr. 24, 2026
Cybersecurity Risk Management, Strategy, and Governance [Line Items]
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]	We have designed and implemented a cybersecurity risk management program to help us identify, assess, and mitigate cybersecurity risks relevant to our business, based on the National Institute of Standards and Technology (NIST) Cyber Security Framework 2.0. Our cybersecurity risk management program includes: •dedicated cybersecurity professionals who analyze cybersecurity threats, define cybersecurity policy and requirements, implement protections, and monitor and respond to cybersecurity incidents, •cybersecurity regulatory based risk assessments for the Company’s systems and applications (where required), •a formal incident response plan, in which incidents are classified based upon the severity, impact, and the potential harm that can be caused by the incident, •annual information security training program for all employees, including phishing awareness training, •cybersecurity works closely with application development and infrastructure & operation teams to embed security considerations into the foundation of technology, •engagement of third-party service providers to conduct assessment of the Company’s cybersecurity risk management program, penetration testing, and vulnerability testing, •a third-party risk assessment process for service providers, suppliers, and vendors. In addition, given the smart technology within our devices, our product security includes design protocols and is supported by quality systems testing and use scanning tools to assess and detect vulnerabilities that could affect our products. Risks from cybersecurity threats are integrated into Medtronic’s Enterprise Risk Management (ERM) program. The ERM program establishes a risk management framework that seeks to identify, assess, and mitigate risks that could materially impact the Company’s business and operation. We engage third-party service providers, such as consultants and independent auditors, to support elements of our cybersecurity and risk management program. These engagements are overseen by cybersecurity leadership and results are incorporated into our ongoing risk management and continuous improvement efforts. We maintain a third-party risk management process designed to identify and manage cybersecurity risks associated with key third-party relationships. To date, the Company is not aware of any cybersecurity incident that has had or is reasonably likely to have a material impact on the Company’s business or operations. However, on April 24, 2026, we announced that an unauthorized third party accessed data in certain of our information technology systems. Upon identifying the unauthorized access, we promptly took steps to contain the incident, activated our incident response protocols, and engaged leading external cybersecurity experts to support our investigation and remediation efforts. Based on our investigation to date, we have not identified any impact to our products, patient safety, connections to customers, manufacturing and distribution operations, financial reporting systems, or our ability to meet patient needs. In addition, we do not currently expect the incident to have a material impact on our business or financial results. Our assessment of the incident is ongoing, and we expect to begin notifying individuals whose data may have been accessed as early as the first quarter of fiscal year 2027. Despite our security measures, there can be no assurance that the Company, or the third parties with which we interact, will not experience a cybersecurity incident in the future that may materially affect us. See Item 1A. Risk Factors under, “We rely on the proper function, security and availability of our information technology systems and data, as well as those of third parties throughout our global supply chain and our customer and payor base, to operate our business, and a breach, cyber-attack or other disruption to these systems or data could materially and adversely affect our business, results of operations, financial condition, cash flows, reputation or competitive position.”
Cybersecurity Risk Management Processes Integrated [Flag]	true
Cybersecurity Risk Management Processes Integrated [Text Block]	We have designed and implemented a cybersecurity risk management program to help us identify, assess, and mitigate cybersecurity risks relevant to our business, based on the National Institute of Standards and Technology (NIST) Cyber Security Framework 2.0. Our cybersecurity risk management program includes: •dedicated cybersecurity professionals who analyze cybersecurity threats, define cybersecurity policy and requirements, implement protections, and monitor and respond to cybersecurity incidents, •cybersecurity regulatory based risk assessments for the Company’s systems and applications (where required), •a formal incident response plan, in which incidents are classified based upon the severity, impact, and the potential harm that can be caused by the incident, •annual information security training program for all employees, including phishing awareness training, •cybersecurity works closely with application development and infrastructure & operation teams to embed security considerations into the foundation of technology, •engagement of third-party service providers to conduct assessment of the Company’s cybersecurity risk management program, penetration testing, and vulnerability testing, •a third-party risk assessment process for service providers, suppliers, and vendors. In addition, given the smart technology within our devices, our product security includes design protocols and is supported by quality systems testing and use scanning tools to assess and detect vulnerabilities that could affect our products. Risks from cybersecurity threats are integrated into Medtronic’s Enterprise Risk Management (ERM) program. The ERM program establishes a risk management framework that seeks to identify, assess, and mitigate risks that could materially impact the Company’s business and operation. We engage third-party service providers, such as consultants and independent auditors, to support elements of our cybersecurity and risk management program. These engagements are overseen by cybersecurity leadership and results are incorporated into our ongoing risk management and continuous improvement efforts. We maintain a third-party risk management process designed to identify and manage cybersecurity risks associated with key third-party relationships.
Cybersecurity Risk Management Third Party Engaged [Flag]	true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag]	true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag]	false
Cybersecurity Risk Board of Directors Oversight [Text Block]	The cybersecurity risk management program is led by the Chief Information Security Officer (CISO). Our CISO has over 30 years of experience assisting public and privately held companies in a variety of industries, leading several enterprise-wide transformation initiatives to adapt to changing cybersecurity threats. The CISO has held various executive level positions within Fortune 500 companies. Our CISO reports to the Chief Information Officer (CIO), who leads the Global Information Technology (IT) organization and works closely with the Executive Committee to guide strategic direction and IT decisions to drive business outcomes. Our Board of Directors is engaged in the Company’s ERM program and receives briefings on the outcomes of the ERM program and the steps the Company takes to mitigate risks that the program identifies. The Quality Committee of the Board oversees the Company’s cybersecurity strategies, systems, and controls to ensure product reliability and prevent unauthorized access. The Audit Committee discusses policies with respect to risk assessment and risk management, including risks associated with the reliability and security of the Company’s information technology and security systems, and the steps management has undertaken to monitor and control such exposures. The Audit Committee receives regular updates on the Company’s cybersecurity risk management program from the CISO and CIO, and our procedures specify escalation of certain cybersecurity events to the Audit Committee chair and full Audit Committee.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block]	The cybersecurity risk management program is led by the Chief Information Security Officer (CISO). Our CISO has over 30 years of experience assisting public and privately held companies in a variety of industries, leading several enterprise-wide transformation initiatives to adapt to changing cybersecurity threats. The CISO has held various executive level positions within Fortune 500 companies. Our CISO reports to the Chief Information Officer (CIO), who leads the Global Information Technology (IT) organization and works closely with the Executive Committee to guide strategic direction and IT decisions to drive business outcomes
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block]	The cybersecurity risk management program is led by the Chief Information Security Officer (CISO). Our CISO has over 30 years of experience assisting public and privately held companies in a variety of industries, leading several enterprise-wide transformation initiatives to adapt to changing cybersecurity threats. The CISO has held various executive level positions within Fortune 500 companies. Our CISO reports to the Chief Information Officer (CIO), who leads the Global Information Technology (IT) organization and works closely with the Executive Committee to guide strategic direction and IT decisions to drive business outcomes. Our Board of Directors is engaged in the Company’s ERM program and receives briefings on the outcomes of the ERM program and the steps the Company takes to mitigate risks that the program identifies. The Quality Committee of the Board oversees the Company’s cybersecurity strategies, systems, and controls to ensure product reliability and prevent unauthorized access. The Audit Committee discusses policies with respect to risk assessment and risk management, including risks associated with the reliability and security of the Company’s information technology and security systems, and the steps management has undertaken to monitor and control such exposures. The Audit Committee receives regular updates on the Company’s cybersecurity risk management program from the CISO and CIO, and our procedures specify escalation of certain cybersecurity events to the Audit Committee chair and full Audit Committee.
Cybersecurity Risk Role of Management [Text Block]	The cybersecurity risk management program is led by the Chief Information Security Officer (CISO). Our CISO has over 30 years of experience assisting public and privately held companies in a variety of industries, leading several enterprise-wide transformation initiatives to adapt to changing cybersecurity threats. The CISO has held various executive level positions within Fortune 500 companies. Our CISO reports to the Chief Information Officer (CIO), who leads the Global Information Technology (IT) organization and works closely with the Executive Committee to guide strategic direction and IT decisions to drive business outcomes. Our Board of Directors is engaged in the Company’s ERM program and receives briefings on the outcomes of the ERM program and the steps the Company takes to mitigate risks that the program identifies. The Quality Committee of the Board oversees the Company’s cybersecurity strategies, systems, and controls to ensure product reliability and prevent unauthorized access. The Audit Committee discusses policies with respect to risk assessment and risk management, including risks associated with the reliability and security of the Company’s information technology and security systems, and the steps management has undertaken to monitor and control such exposures. The Audit Committee receives regular updates on the Company’s cybersecurity risk management program from the CISO and CIO, and our procedures specify escalation of certain cybersecurity events to the Audit Committee chair and full Audit Committee.
Cybersecurity Risk Management Positions or Committees Responsible [Flag]	true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block]	The cybersecurity risk management program is led by the Chief Information Security Officer (CISO). Our CISO has over 30 years of experience assisting public and privately held companies in a variety of industries, leading several enterprise-wide transformation initiatives to adapt to changing cybersecurity threats. The CISO has held various executive level positions within Fortune 500 companies. Our CISO reports to the Chief Information Officer (CIO), who leads the Global Information Technology (IT) organization and works closely with the Executive Committee to guide strategic direction and IT decisions to drive business outcomes.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block]	Our CISO has over 30 years of experience assisting public and privately held companies in a variety of industries, leading several enterprise-wide transformation initiatives to adapt to changing cybersecurity threats. The CISO has held various executive level positions within Fortune 500 companies. Our CISO reports to the Chief Information Officer (CIO), who leads the Global Information Technology (IT) organization and works closely with the Executive Committee to guide strategic direction and IT decisions to drive business outcomes.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block]	Our Board of Directors is engaged in the Company’s ERM program and receives briefings on the outcomes of the ERM program and the steps the Company takes to mitigate risks that the program identifies. The Quality Committee of the Board oversees the Company’s cybersecurity strategies, systems, and controls to ensure product reliability and prevent unauthorized access. The Audit Committee discusses policies with respect to risk assessment and risk management, including risks associated with the reliability and security of the Company’s information technology and security systems, and the steps management has undertaken to monitor and control such exposures. The Audit Committee receives regular updates on the Company’s cybersecurity risk management program from the CISO and CIO, and our procedures specify escalation of certain cybersecurity events to the Audit Committee chair and full Audit Committee.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag]	true

Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]

We have designed and implemented a cybersecurity risk management program to help us identify, assess, and mitigate cybersecurity risks relevant to our business, based on the National Institute of Standards and Technology (NIST) Cyber Security Framework 2.0.

Our cybersecurity risk management program includes:

•dedicated cybersecurity professionals who analyze cybersecurity threats, define cybersecurity policy and requirements, implement protections, and monitor and respond to cybersecurity incidents,

•cybersecurity regulatory based risk assessments for the Company’s systems and applications (where required),

•a formal incident response plan, in which incidents are classified based upon the severity, impact, and the potential harm that can be caused by the incident,

•annual information security training program for all employees, including phishing awareness training,

•cybersecurity works closely with application development and infrastructure & operation teams to embed security considerations into the foundation of technology,

•engagement of third-party service providers to conduct assessment of the Company’s cybersecurity risk management program, penetration testing, and vulnerability testing,

•a third-party risk assessment process for service providers, suppliers, and vendors.

In addition, given the smart technology within our devices, our product security includes design protocols and is supported by quality systems testing and use scanning tools to assess and detect vulnerabilities that could affect our products.

Risks from cybersecurity threats are integrated into Medtronic’s Enterprise Risk Management (ERM) program. The ERM program establishes a risk management framework that seeks to identify, assess, and mitigate risks that could materially impact the Company’s business and operation.

We engage third-party service providers, such as consultants and independent auditors, to support elements of our cybersecurity and risk management program. These engagements are overseen by cybersecurity leadership and results are incorporated into our ongoing risk management and continuous improvement efforts. We maintain a third-party risk management process designed to identify and manage cybersecurity risks associated with key third-party relationships.

To date, the Company is not aware of any cybersecurity incident that has had or is reasonably likely to have a material impact on the Company’s business or operations. However, on April 24, 2026, we announced that an unauthorized third party accessed data in certain of our information technology systems. Upon identifying the unauthorized access, we promptly took steps to contain the incident, activated our incident response protocols, and engaged leading external cybersecurity experts to support our investigation and remediation efforts. Based on our investigation to date, we have not identified any impact to our products, patient safety, connections to customers, manufacturing and distribution operations, financial reporting systems, or our ability to meet patient needs. In addition, we do not currently expect the incident to have a material impact on our business or financial results. Our assessment of the incident is ongoing, and we expect to begin notifying individuals whose data may have been accessed as early as the first quarter of fiscal year 2027. Despite our security measures, there can be no assurance that the Company, or the third parties with which we interact, will not experience a cybersecurity incident in the future that may materially affect us. See Item 1A. Risk Factors under, “We rely on the proper function, security and availability of our information technology systems and data, as well as those of third parties throughout our global supply chain and our customer and payor base, to

operate our business, and a breach, cyber-attack or other disruption to these systems or data could materially and adversely affect our business, results of operations, financial condition, cash flows, reputation or competitive position.”

Cybersecurity Risk Management Processes Integrated [Text Block]