INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

iRhythm biosensor firm suffers massive data breach impacting hundreds

| 2026-10-09 16:06 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach at biosensor firm iRhythm occurred on June 8, impacting hundreds of thousands of people. The hackers gained unauthorized access to third-party-hosted business applications through a social engineering attack and stole the sensitive information of at least 360,000 individuals, including names, addresses, phone numbers, patient account numbers, device serial numbers, insurance numbers, dates of service, and date of birth. The breach did not affect iRhythm's clinical systems or medical devices, and no personal information was found to have been used for identity theft. The hackers accessed company systems between June 3 and June 8, and the incident was discovered by iRhythm after detecting unauthorized access; the company notified affected individuals and regulators promptly.
Technical Mitigations AI-generated
• Patch Zio Patch firmware to prevent similar unauthorized access. • Implement multi-factor authentication for third-party-hosted business applications. • Monitor system logs for social engineering attack indicators, such as suspicious login attempts or emails from unknown senders.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎June 8
Threat actors gained unauthorized access to third-party systems of biosensor firm iRhythm on June 8.
‎between June 3 and June 8
Hackers gained unauthorized access to iRhythm's company systems between June 3 and June 8.
‎2026/10/09
Threat actors used a social engineering attack to gain unauthorized access to unidentified third-party-hosted business applications at iRhythm, resulting in the exfiltration of sensitive medical data from approximately 360,000 individuals.
organisation iRhythm
Hundreds of thousands impacted by data breach at biosensor firm iRhythm.
organisation Recorded Future News
A company spokesperson declined to say the full number of victims, telling Recorded Future News that iRhythm “responded promptly after detecting the unauthorized access and, once the scope was verified, notified affected individuals and applicable regulators.”
organisation the Securities and Exchange Commission
In a June 8-K filing with the Securities and Exchange Commission (SEC), iRhythm said it “received communications from a threat actor claiming to have obtained sensitive information, including proprietary data, patient protected health information and other personal information.”
organisation SEC
In a June 8-K filing with the Securities and Exchange Commission (SEC), iRhythm said it “received communications from a threat actor claiming to have obtained sensitive information, including proprietary data, patient protected health information and other personal information.”
organisation Company
“Since receipt of the communications, the Company has confirmed that certain data was exfiltrated from those applications.”
organisation Medtronic
Cyberattacks on Medtronic , Boston Scientific , Stryker , UFP , Masimo , Surmodics , Artivion and Zoll have leaked the sensitive medical data of millions and caused supply chain issues.
organisation Boston Scientific
Cyberattacks on Medtronic , Boston Scientific , Stryker , UFP , Masimo , Surmodics , Artivion and Zoll have leaked the sensitive medical data of millions and caused supply chain issues.
financial $224.2 company
The company reported $224.2 million in Q2 revenue.
Tactical Metrics
Metrics
financial
224,200,000
Financial Impact / Stolen Funds
The company reported $224.2 million in Q2 revenue.
Intelligence Sources
TheRecord 2026-10-09