Medical equipment provider iRhythm disclosed a data breach in June 2026 that affected 8,179,772 individuals. The incident was officially listed on the US Department of Health and Human Services (HHS) data breach portal, confirming the scale of the compromise previously reported to the Oregon Attorney General’s office.
The breach involved sensitive information stolen from certain third-party-hosted business applications. Compromised data included patients’ names, addresses, dates of birth, email addresses, phone numbers, and iRhythm account and device data, such as account/serial/insurance numbers and dates of service.
iRhythm stated that hackers attempted to extort a ransom, threatening to leak the compromised data. The company has begun sending notification letters to affected individuals and filed notices with various state regulators. iRhythm maintains there is no evidence that any personal information has been used for identity theft and reported no impact on its products, clinical systems, manufacturing, or patient safety.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's briefNew every morning, and the back catalogue is archived by date.
Medical equipment provider iRhythm reported a data breach in June 2026 affecting 8.2 million individuals, as confirmed by an HHS filing. The breach compromised personal and device data, including names, addresses, dates of birth, and account information, from third-party-hosted business applications.