Data Breaches
iRhythm Data Breach Impacts at Least 360,000 People
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.
By
|
October 12, 2026 (7:05 AM ET)
- + Flipboard + Reddit [+ Whatsapp](https://web.whatsapp.com/send?text=iRhythm Data Breach Impacts at Least 360,000 People https://www.securityweek.com/irhythm-data-breach-impacts-over-360000-people/) [+ Whatsapp](whatsapp://send?text=iRhythm Data Breach Impacts at Least 360,000 People https://www.securityweek.com/irhythm-data-breach-impacts-over-360000-people/) + Email
Medical equipment provider iRhythm is notifying more than 360,000 people that hackers stole their personal information.
The data breach was identified on June 8 and involved third-party-hosted business applications that stored certain iRhythm information, the company says .
During its investigation into the incident, iRhythm determined that hackers accessed and exfiltrated patient data from the affected applications between June 3 and June 8.
The compromised information includes patients’ names, addresses, email addresses, dates of birth, and phone numbers, as well as iRhythm account and device data, such as account numbers, serial numbers, insurance numbers, and dates of service.
Based on data breach notices iRhythm filed last week with regulators in several states, at least 360,000 individuals (298,647 in Texas and 69,526 in South Carolina) were affected. The total number of impacted patients is likely significantly higher.
In a June filing with the Securities and Exchange Commission (SEC), the company said the hackers contacted it on June 9, threatening to leak the stolen information online unless a ransom was paid.
Advertisement. Scroll to continue reading.
Last week, iRhythm said it currently has no evidence that the stolen information “has been or will be used to commit identity theft,” which suggests that it gave in to the extortionists.
“As iRhythm previously reported, the company has not identified any impact to our products, our clinical or medical device systems, our connections to customers, our manufacturing and distribution operations, patient safety, or our ability to meet patient needs,” the company said.
Additionally, iRhythm noted that the incident is not reasonably likely to materially impact its financial condition or results of operations.
SecurityWeek has emailed iRhythm for additional information on the data breach and will update this article if the company responds.
iRhythm describes itself as a digital healthcare company that combines wearable cardiac monitoring biosensors with cloud-based data analytics to turn cardiac data into clinically actionable information.
Related: Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million
Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Related: Advantest Discloses Data Breach Months After Ransomware Attack
Written By
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
More from Ionut Arghire
- Google Domains Impacted by Recent ccTLD Hijacks
- Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
- US Disrupts Chinese State-Sponsored Hacking Tools
- Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
- Cisco Patches a Dozen Critical Vulnerabilities
- SonicWall and Splunk Patch Critical Vulnerabilities
- Rein Security Raises $25 Million to Guard AI Agents at Runtime
- Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
Latest News
- IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
- Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
- Canonical Websites Disrupted in Second DDoS Attack This Year
- Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
- Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
- Critical SonicWall Vulnerability Exploited Days After Disclosure
- Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
- Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
Trending
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Critical SonicWall Vulnerability Exploited Days After Disclosure
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
iRhythm Data Breach Impacts at Least 360,000 People
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
Canonical Websites Disrupted in Second DDoS Attack This Year
Security Awareness Training Isn’t Dead, but It Needs a Rethink
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
## Webinar: AI Is Accelerating Risk. Can Your IT Operations Keep Up?
October 14, 2026
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
## Virtual Event: Zero Trust & Identity Strategies Summit 2026
October 14, 2026
Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
People on the Move
Rapid7 has named Rik Ferguson as VP of Security Intelligence.
Cytactic has appointed Tim Brown as CSO.
Scott Simkin has joined Vega as CMO.
Expert Insights
## AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. (Joshua Goldfarb)
## Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. (Steve Durbin)
## Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. (Nadir Izrael)
## “We Think the Security Control Is Working” Is No Longer Good Enough
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar)
## This Key Will Self-Destruct: An Open Standard for Revocable API Keys
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default. (Matt Honea)
- + Flipboard + Reddit [+ Whatsapp](https://web.whatsapp.com/send?text=iRhythm Data Breach Impacts at Least 360,000 People https://www.securityweek.com/irhythm-data-breach-impacts-over-360000-people/) [+ Whatsapp](whatsapp://send?text=iRhythm Data Breach Impacts at Least 360,000 People https://www.securityweek.com/irhythm-data-breach-impacts-over-360000-people/) + Email
Popular Topics
Security Community
- Virtual Cybersecurity Events
- Webcast Library
- CISO Forum
- AI Risk Summit
- ICS Cybersecurity Conference
- Cybersecurity Newsletters
Stay Intouch
About SecurityWeek
News Tips
Got a confidential news tip? We want to hear from you.
Advertising
Reach a large audience of enterprise cybersecurity professionals
Daily Briefing Newsletter
Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.
Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.