iRhythm Data Breach Exposed 360,000 Individuals

A mid-2026 security breach compromised personal patient data through third-party business applications.

Updated on Oct. 10, 2026 in Cybersecurity

Bold flat-color editorial illustration showing a monolithic building facade with a single glowing rectangular cutout, evoking institutional data vulnerability. — iRhythm reported a mid-2026 data breach involving the theft of personal insurance and contact information belonging to 360,000 individuals. AI Illustration. Upload story photo >

Live Poll

Do you trust that your personal data is adequately protected by the companies you use?

Between June 3 and June 8, 2026, hackers exploited third-party applications to steal the names, addresses, and insurance information of 360,000 people. iRhythm reported the incident and began filing official breach notices in October 2026.

Why it matters

The incident highlights the growing risks posed by third-party vulnerabilities, as a threat actor reportedly demanded payment to prevent the disclosure of the stolen patient information.

The breach compromised the records of 298,647 residents in Texas and 69,526 in South Carolina. The company confirmed that unauthorized access occurred specifically through third-party-hosted business applications.

The players

iRhythm

A healthcare technology company that provides digital heart monitoring services.

The details

Hackers utilized a social engineering attack to gain entry into the company's systems. The stolen dataset includes sensitive personal identifiers such as names, addresses, and patient insurance numbers.

June 3, 2026: Hackers began accessing company systems.
June 8, 2026: The unauthorized access period ceased.
October 2026: The company began filing breach notices with state regulators.

The Tech Race

This breach underscores the vulnerability of modern healthcare infrastructures that rely on integrated third-party platforms. It reflects a shift away from perimeter-based security towards the protection of decentralized business applications against social engineering.

Affected individuals may face an increased risk of identity theft or phishing attempts using their leaked insurance information. Patients are advised to monitor their insurance statements for unauthorized claims or unusual activity.

The takeaway

Healthcare providers remain prime targets for cybercriminals seeking high-value personal data through secondary vendors. Users should remain vigilant regarding suspicious communications regarding their medical coverage following any reported network intrusion.