Healthcare
,
Incident & Breach Response
,
Industry Specific
Breach Could Affect Every iRhythm User
Marianne Kolbasuk McGee (HealthInfoSec) •
October 16, 2026
Image: Shutterstock/ISMG
A data breach by wearable cardiac monitor maker iRhythm Technologies is large enough to potentially encompass every user of the San Francisco company’s technology.See Also: Transform Financial Services with Smarter, Unified Cybersecurity
The portable heartbeat detector manufacturer divulged the breach’s topline to the Oregon attorney general in an Oct. 6 filing that became public Thursday (see: Heart Monitor Firm Notifying At Least 370,000 Patients of Hack).
A handful of media outlets, including BeInsure, have reported that the iRhythm incident affected millions, but the Oregon filing is the first official confirmation of the breach’s wide-ranging scope. The company has been reluctant to make known the full extent of its breach, telling ISMG in a Tuesday email that “the number of affected individuals is reflected in our required regulatory filings.”
The company on its website describes itself as a “world leader in the management of cardiac arrhythmia information,” with more than 8 million patients in the U.S. and Europe, and “over 1.5 billion hours of heartbeat data analyzed.” iRhythm’s products include its Zio electrocardiogram monitoring devices that patients wear at home.
iRhythm in a June 10 filing to the U.S. Securities and Exchange Commission said it received demands from a threat actor for an undisclosed payment in exchange for not publicly releasing the stolen data, including proprietary data, patient protected health information and other personal information.
The company did not disclose whether it paid an extortion demand (see: Heart Monitoring Firm Tells SEC Hackers Stole Sensitive Data).
Click Here For The Original Source.
——————————————————–
