Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

IRhythm Holdings hit by cyberattack

Incident
First reported
Last updated
Happening score
H score 31
2 unique sources, 2 articles

Summary

Hide ▲

iRhythm Holdings disclosed a data breach after attackers used social engineering against third-party-hosted business applications and stole patients' personal and health information. The company said it detected unauthorized activity on June 8, 2026, was contacted on June 9 with claims of stolen proprietary data and patient protected health information, and later confirmed that some data has been stolen. iRhythm said the incident did not affect its products, clinical or medical device systems, manufacturing and distribution operations, or financial reporting systems, and it is still determining the full scope of the breach.

Related Happenings

IRhythm patient data exfiltration from third-party business applications

Data Leak
H score34 First: 16.06.2026 09:31 Last: 16.06.2026 09:31 Sources 1

How related: Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients' personal and health information stored on third-party-hosted business applications.

About this happening: iRhythm Holdings disclosed a data breach involving third-party-hosted business applications after a threat actor used social engineering to access data and demande...

Open Happening

West Pharmaceutical Services Inc. hit by data theft breach

Incident
H score19 First: 14.05.2026 01:23 Last: 14.05.2026 01:23 Sources 1

About this happening: West Pharmaceutical Services disclosed a cyberattack that exfiltrated data and encrypted systems, disrupting global operations and increasing recovery risk. The co...

Open Happening

Medtronic hit by network compromise

Incident
H score65 First: 27.04.2026 16:50 Last: 27.04.2026 16:50 Sources 1

About this happening: Medtronic disclosed a network breach that reached certain corporate IT systems, making it a confirmed victim of a cyber intrusion. The company said there was no impact...

Open Happening

UFP Technologies hit by network compromise

Incident
H score15 First: 26.02.2026 01:02 Last: 26.02.2026 01:02 Sources 1

About this happening: UFP Technologies disclosed a cybersecurity incident that affected many but not all IT systems, disrupting billing and label making for customer deliveries. The com...

Open Happening

Timeline

  1. 16.06.2026 18:06 1 articles · 29d ago

    iRhythm detects unauthorized activity on third-party-hosted business applications

    Detection Ioc Update

    iRhythm detected unauthorized activity involving data maintained on certain third-party-hosted business applications on June 8 after social engineering was used against the applications; the targeted application was not named.

    Show sources
    Open in new tab
  2. 16.06.2026 09:31 1 articles · 29d ago

    Threat actor demands ransom from iRhythm Holdings

    Exploitation Observed

    A threat actor contacted iRhythm Holdings on June 9, 2026, claimed to have obtained sensitive information including proprietary data and patient protected health information, and demanded payment to avoid public disclosure. iRhythm said the access path involved social engineering against third-party-hosted business applications.

    Show sources
    Open in new tab
  3. 16.06.2026 09:31 1 articles · 29d ago

    iRhythm Holdings determines breach is material

    Victim Impact Update

    On June 10, 2026, iRhythm Holdings determined the incident was material in light of the volume of potentially affected data. The company later confirmed that certain data had been exfiltrated from the third-party-hosted business applications.

    Show sources
    Open in new tab
  4. 16.06.2026 09:31 2 articles · 29d ago

    iRhythm Holdings discloses data breach in SEC filing

    Initial Disclosure

    On June 16, 2026, iRhythm Holdings disclosed the breach in an SEC filing, said it had discovered the incident one day earlier, launched an investigation with external cybersecurity experts, and activated its cybersecurity response plan to contain the breach.

    Show sources
    Open in new tab