iRhythm Reports Data Breach Involving PHI Theft from Third-Party Applications

iRhythm Technologies disclosed a data breach involving unauthorized access to sensitive patient data stored in third-party applications. The company detected suspicious activity on June 8, 2026, and confirmed data exfiltration after receiving a ransom demand from a threat actor on June 9. The compromised data includes protected health information (PHI) and proprietary company information. iRhythm stated that the breach did not impact its clinical systems, medical devices, or patient safety. The attack was attributed to social engineering tactics targeting third-party-hosted business applications. The company is actively investigating the incident and has not identified ongoing unauthorized access. iRhythm believes the incident is not likely to materially affect its financial condition and has cybersecurity insurance to cover potential losses.

Key Points: • iRhythm detected unauthorized access to sensitive data on June 8, 2026. • The breach involved patient protected health information and proprietary data. • No impact on clinical systems or patient safety has been identified.