INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

HHS Filing Reveals iRhythm Data Breach Affected Approximately 8.2 Million

| 2026-10-29 08:27 CRITICAL HIGH DATA BREACH
Executive Summary
AI-generated
In June 2026, medical equipment provider iRhythm experienced a data breach affecting over 8.2 million individuals in the United States, with sensitive information including names, addresses, dates of birth, email addresses, phone numbers, and account and device data potentially compromised by hackers who attempted to extort a ransom. The incident has been listed on the US Department of Health and Human Services' data breach portal as affecting 8,179,772 individuals. iRhythm started sending notification letters to potentially affected individuals earlier this month and filed notices with regulators in several states, including the HHS.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA healthhealth
Incident Timeline
‎June 2026
IRhythm disclosed a June 2026 data breach affecting over 8 million individuals, and subsequently filed notices with regulators in several states and the US Department of Health and Human Services.
tactic Data Breach
organisation iRhythm
general_metric 8 people
organisation the US Department of Health and Human Services
organisation HHS
organisation Customer Data From Internal Systems Related:
organisation Capcom Data Breach
data_breach 238,000 Denver Plan Members
data_breach 11 Genesys Exposes Customer Data
organisation ECG
‎2026/10/29
General Document Context HHS Filing Puts iRhythm Data Breach Toll at 8.
organisation HHS Filing
organisation iRhythm Data Breach Toll
Tactical Metrics
Metrics
data_breach
238,000
Denver Plan Members
Metrics
data_breach
11,000,000
Genesys Exposes Customer Data
Intelligence Sources