Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients' personal and protected health information from third-party-hosted business applications. The attackers contacted the company on June 9, 2026, demanding a ransom to prevent public disclosure of the stolen data. iRhythm confirmed data exfiltration occurred via social engineering and determined the incident material due to the volume of potentially affected data. The breach does not affect clinical or medical device systems, patient safety, or financial reporting systems. The number of affected individuals has not yet been disclosed.
Table of contents
Related Articles:177 Impressions