HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

https://www.securityweek.com/wp-content/uploads/2023/01/Cybersecurity_News-SecurityWeek.jpg

More than 8 million people were impacted by a June 2026 data breach at medical equipment provider iRhythm.

The company, which specializes in wearable cardiac monitoring technology and is best known for its Zio wearable ECG monitor, disclosed the incident in mid-June.

iRhythm said right from the start that sensitive information might have been stolen from certain third-party-hosted business applications and that the hackers attempted to extort a ransom, threatening to leak the compromised data.

Earlier this month, the company started sending notification letters to the potentially affected individuals and filed notices with regulators in several states, as well as with the US Department of Health and Human Services (HHS).

The incident has now been listed on the HHS data breach portal as affecting 8,179,772 individuals, a number iRhythm previously reported to the Oregon Attorney General’s office.

Per iRhythm’s previous notices, the hackers compromised patients’ names, addresses, dates of birth,...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

Read more