iRhythm Discloses Patient Data Breach After Social Engineering Attack
Digital healthcare firm iRhythm Holdings disclosed a breach in which attackers used social engineering to access third-party business applications and steal patients' personal and protected health information. The company, which analyzes cardiac data from over 12 million patients, received a ransom demand on June 9 and discovered the incident the next day. No evidence of impact on devices, patient safety, or operations was found; the disclosure was filed with the SEC.
- personal information
- protected health information
- proprietary data
On June 16, 2026, iRhythm Holdings disclosed that attackers had used social engineering to break into third-party business applications and steal patients’ personal information and protected health information. The California-based company, which analyzes cardiac data from more than 12 million patients, received a ransom demand on June 9, discovered the incident the following day, and filed notice with the SEC. No evidence was found that the attack affected medical devices, patient safety, or day-to-day operations.
Public reporting indicates the intruders gained access through social engineering techniques aimed at third-party business applications rather than iRhythm’s core systems. The stolen material included personal details and protected health information belonging to an as-yet-undisclosed number of patients, along with some proprietary company data. The disclosure follows the pattern of many recent incidents in which criminals combine social engineering with access to vendor portals to reach sensitive records without triggering immediate alarms on the primary network.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →