HHS lists iRhythm breach as affecting 8.2 million people
Original title: HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
The June 2026 incident exposed patient contact details and device account data after hackers tried to extort a ransom.
An HHS filing lists a June 2026 data breach at cardiac-monitoring company iRhythm as affecting 8,179,772 people, matching a figure previously reported to Oregon's attorney general. iRhythm said attackers reached third-party-hosted business applications and tried to extort a ransom by threatening to leak data. Stolen fields include names, contact details, dates of birth, and account and device data. The company says it has no evidence of identity theft or impact to products, clinical systems, or patient care.
Unconfirmed: iRhythm says it has no evidence the stolen data has been or will be used for identity theft.
- iRhythm disclosed the incident in mid-June and later mailed notification letters.
- Exposed data includes account, serial, and insurance numbers plus dates of service.
- The notice does not offer free identity-theft or credit-monitoring services.
- iRhythm says manufacturing, distribution, and patient-care operations were not affected.
Impact: Patient contact details and account and device data exposed
- 1.Watch for medical identity theft and identity fraud if notified as affected.
- Victims
- iRhythm
- Organizations
- US Department of Health and Human Services
- Countries
- United States
From the original article
1 min read at securityweek.com
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications. The post HHS Filing Puts iRhythm Data Breach Toll at 8. 2 Million appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.