Over 8 million individuals were affected by a data breach in June 2026 at iRhythm, a leading provider of wearable cardiac monitoring devices. Known for its Zio wearable ECG monitor, the company disclosed the security incident in mid-June.
Details of the iRhythm Security Incident
The breach involved unauthorized access to sensitive data hosted on third-party business applications. Hackers attempted to extort a ransom by threatening to release the compromised information. iRhythm promptly reported the breach, emphasizing the potential exposure of sensitive data.
Notification letters were sent to possibly affected individuals, and regulatory bodies across several states, including the US Department of Health and Human Services (HHS), were informed. The breach has been officially recorded on the HHS data breach portal, impacting 8,179,772 people, a figure also shared with the Oregon Attorney General.
Nature of Compromised Data
According to iRhythm, the compromised data includes personal information such as names, addresses, dates of birth, email addresses, and phone numbers, as well as specific iRhythm account and device information, including account numbers and dates of service.
Despite the breach, iRhythm has stated there is no evidence that the personal information has been or will be used for identity theft. Nevertheless, they advise affected individuals to remain vigilant against potential identity fraud.
Company’s Response and Assurance
iRhythm affirmed that the security breach has not impacted their products, clinical or medical device systems, or any aspect of their operations. The company remains committed to patient safety and assures its ability to meet patient needs is unaffected.
While the notice advised caution, it did not offer free identity theft or credit monitoring services to those potentially impacted. The incident underscores the importance of robust cybersecurity measures in protecting sensitive healthcare data.
Related incidents include a similar data exposure involving the data of 238,000 Denver Health Plan members and significant breaches affecting companies like Genesys and Quest Diagnostics, highlighting ongoing challenges in data security across industries.
