Skip to content
Back to Blog
critical severity October 06, 2026 · 1 min read

iRhythm Technologies Inc. Data Breach Notice (Washington Attorney General)

If you were named in this filing, here’s what the filing says was exposed, and what to do about it.

iRhythm Technologies Inc. notified Washington residents of a data breach in a filing reported to the Washington State Attorney General on October 06, 2026, and the notice lists name, full date of birth, health insurance policy or ID number, medical information and protected health information owned or licensed by a HIPAA covered entity among the information exposed. The filing puts the incident itself on June 03, 2026.

iRhythm Technologies Inc. Data Breach Notice (Washington Attorney General)

What to do now

Steps that match what this notice says was exposed

Every step below is free and you do it yourself, and none of it depends on iRhythm Technologies Inc..

  1. Read your next explanation of benefits. Medical identity theft shows up as treatment you did not receive, billed to your policy and written into your medical record. Your insurer can flag the policy, and you can request an accounting of disclosures from the provider named here.
  2. Expect the phone calls to get better. A date of birth is not secret, but it is what call centres use to confirm you are you. Treat any unexpected call that already knows your details as unverified until you call the company back yourself.

One more, whatever was exposed: a breach notice is a favourite disguise for a phishing email. If a message about this arrives, do not use its links — go to the company’s site yourself, or call the number on your statement.

Report details & sourcing

Severity Critical identifiers that cannot be reissued, alongside documents or accounts that can be misused now
Disclosed October 06, 2026
Last reviewed October 6, 2026
Affected 220745
Data exposed NameFull Date of BirthHealth Insurance Policy or ID NumberMedical InformationProtected Health Information owned or licensed by a HIPAA covered entity
By GalaxyWarden Threat Research · Editorial & sourcing standards
Editorial & sourcing policy
GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.
Sources: Washington State Attorney General breach notification
Share this Post on X Reddit Email

Related breaches

critical September 30, 2026

Poppins Payroll Data Breach Notice (Vermont Attorney General)

Poppins Payroll notified Vermont residents of a data breach in a filing reported to the Vermont Atto…
high September 30, 2026

OneMain Financial Group, LLC Data Breach Notice (Vermont Attorney General)

OneMain Financial Group, LLC notified Vermont residents of a data breach in a filing reported to the…
low September 30, 2026

ProCamps Data Breach Notice (California Attorney General)

ProCamps notified California residents of a data breach in a filing reported to the California Attor…