iRhythm notifies patients of June data theft from third-party-hosted apps; a Texas filing lists about 8.18 million affected
iRhythm, which makes the Zio heart monitor, says unauthorized actors accessed and downloaded data from certain third-party-hosted business applications between June 3 and June 8, 2026. Stolen data includes patient names, addresses, emails, phone numbers, dates of birth, iRhythm account and device serial numbers, insurance numbers and dates of service. Notices began going out Oct 2. State filings list 298,647 Texas and 69,526 South Carolina residents, and the Texas filing gives a nationwide total of 8,179,772, although iRhythm's own release doesn't state a total. SecurityWeek reports the company's June SEC filing said the hackers threatened to leak the data unless paid.
Sources: iRhythm press release · California AG breach notice · AcidPeak filing summary · SecurityWeek