Every public data breach

47 disclosed this week · 26,367 on record

iRhythm Technologies

Disclosed Jun 15, 20268,179,772 affectedConfirmed

SEC filing

iRhythm says patient health data stolen from third-party hosted apps

Cardiac monitoring firm iRhythm told the SEC that attackers used social engineering to access third-party-hosted business applications and exfiltrated patient health and personal information plus proprietary data, then demanded a ransom.

What is known

People affected8,179,772 (as reported by the organization)
DisclosedJun 15, 2026
DiscoveredJun 9, 2026
HappenedJun 3, 2026
AttackPhishing
Data exposedHealthNamesOtherInsuranceDates of birthAddresses
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
source2026-10-29
empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsfby dailySource
source2026-10-22
empty to https://www.atg.wa.gov/data-breach-notificationsby dailySource
source2026-10-16
empty to https://justice.oregon.gov/consumer/DataBreach/by dailySource
source2026-10-08
empty to https://oag.ca.gov/privacy/databreach/list?field_sb24_org_name_value=iRhythm%20Technologiesby dailySource
data_types2026-10-07
["health","names","other"] to ["health","names","other","insurance","dob","addresses"]by dailySource
records_basis2026-10-07
empty to organizationby dailySource
records2026-10-07
empty to 8179772by dailySource
occurred2026-10-07
empty to 2026-06-03by dailySource
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about iRhythm Technologies