iRhythm Technologies
Disclosed Jun 15, 20268,179,772 affectedConfirmed
iRhythm says patient health data stolen from third-party hosted apps
Cardiac monitoring firm iRhythm told the SEC that attackers used social engineering to access third-party-hosted business applications and exfiltrated patient health and personal information plus proprietary data, then demanded a ransom.
What is known
| People affected | 8,179,772 (as reported by the organization) |
|---|---|
| Disclosed | Jun 15, 2026 |
| Discovered | Jun 9, 2026 |
| Happened | Jun 3, 2026 |
| Attack | Phishing |
| Data exposed | HealthNamesOtherInsuranceDates of birthAddresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
iRhythm discloses data breach, says hackers stole patient infoiRhythm Holdings Form 8-KTexas Attorney General data security breach report BR-0005401: iRhythm TechnologiesCalifornia Attorney General breach notice: iRhythm TechnologiesOregon DOJ breach notice: iRhythm TechnologiesWashington Attorney General breach notice: iRhythm TechnologiesHHS OCR breach report: iRhythm Technologies (Healthcare Provider, CA)
Notices filed
History of this record
empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsfby dailySource
empty to https://www.atg.wa.gov/data-breach-notificationsby dailySource
empty to https://justice.oregon.gov/consumer/DataBreach/by dailySource
empty to https://oag.ca.gov/privacy/databreach/list?field_sb24_org_name_value=iRhythm%20Technologiesby dailySource
["health","names","other"] to ["health","names","other","insurance","dob","addresses"]by dailySource
empty to organizationby dailySource
empty to 8179772by dailySource
empty to 2026-06-03by dailySource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.