INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

iRhythm Data Breach Exposes Personal Health Records of 360,000

| 2026-10-12 11:05 CRITICAL HIGH DATA BREACH
JSON
Executive Summary
AI-generated
On June 8, hackers conducted a data breach against iRhythm, impacting at least 360,000 people. The attackers accessed and exfiltrated patient data from third-party-hosted business applications between June 3 and June 8, compromising information including names, addresses, email addresses, dates of birth, phone numbers, account numbers, serial numbers, insurance numbers, and dates of service. The hackers contacted iRhythm on June 9, threatening to leak the stolen information online unless a ransom was paid; however, it is unclear who is behind this extortion plot. This incident affected individuals in Texas (298,647) and South Carolina (69,526), with potentially many more impacted overall.
Technical Mitigations AI-generated
• Patch iRhythm's third-party-hosted business applications to prevent similar data breaches. • Monitor for suspicious activity related to the June 9 ransom demand from hackers. • Implement a robust incident response plan, including notification of affected individuals and regulatory bodies.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
GE
healthhealth
Incident Timeline
‎June 8
Threat actors exploited vulnerabilities in third-party-hosted business applications to breach iRhythm, impacting at least 360,000 people.
tactic Data Breach
The data breach was identified on June 8 and involved third-party-hosted business applications that stored certain iRhythm information, the company says .
‎June 9
Threat actors contacted the Securities and Exchange Commission on June 9, threatening to leak stolen iRhythm data online unless a ransom was paid.
organisation the Securities and Exchange Commission
In a June filing with the Securities and Exchange Commission (SEC), the company said the hackers contacted it on June 9, threatening to leak the stolen information online unless a ransom was paid.
organisation SEC
In a June filing with the Securities and Exchange Commission (SEC), the company said the hackers contacted it on June 9, threatening to leak the stolen information online unless a ransom was paid.
‎2026/10/05
Threat actors successfully extorted iRhythm, resulting in the theft of sensitive information from at least 360,000 individuals.
tactic Data Breach
Based on data breach notices iRhythm filed last week with regulators in several states, at least 360,000 individuals (298,647 in Texas and 69,526 in South Carolina) were affected.
general_metric 360,000 People
Based on data breach notices iRhythm filed last week with regulators in several states, at least 360,000 individuals (298,647 in Texas and 69,526 in South Carolina) were affected.
general_metric 298,647 individuals
Based on data breach notices iRhythm filed last week with regulators in several states, at least 360,000 individuals (298,647 in Texas and 69,526 in South Carolina) were affected.
‎between June 3 and June 8
Hackers accessed and exfiltrated patient data from the affected iRhythm applications between June 3 and June 8.
‎2026/10/12
Hackers stole the personal information of more than 360,000 people from iRhythm.
organisation Oracle Health Data Breach Tally Climbs
Related: Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
organisation Georgia Power
Related: Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
organisation Alabama Power Data Breach Hits
Related: Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
data_breach 20 Climbs
Related: Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
organisation iRhythm Data Breach Impacts
iRhythm Data Breach Impacts at Least 360,000 People.
organisation iRhythm
Medical equipment provider iRhythm is notifying more than 360,000 people that hackers stole their personal information.
Tactical Metrics
Metrics
data_breach
20,000,000
Climbs
Related: Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
Intelligence Sources
SecurityWeek 2026-10-12