iRhythm Technologies Data Breach Impacts 8 Million People

iRhythm Technologies Inc., a medical device company that provides cardiac rhythm monitoring services, disclosed a data breach affecting approximately 8,179,772 individuals in the United States.

Of the total individuals impacted, 298,647 were residents of Texas, 220,745 of Washington and 69,526 of South Carolina. The company posted a notice of the data event on its website, as well as reported the incident to the attorneys general of California and Oregon and to the U.S. Securities and Exchange Commission.

On June 8, 2026, iRhythm detected unauthorized access in certain third-party hosted business applications. A forensic investigation determined that unauthorized individuals accessed and downloaded data between June 3 and June 8, 2026.

On June 16, 2026, details about the cyberattack appeared on the open web.

The types of information confirmed to have been exposed included both personally identifiable information and protected health information including names, addresses, email addresses, phone numbers, iRhythm patient account numbers, iRhythm device serial numbers, medical information, health insurance information, dates of service and dates of birth.

iRhythm Technologies' response to the breach

The company set up a dedicated toll-free response line at 1-844-770-7175 for people with questions about the incident. The line is available Monday through Friday from 8 a.m. to 8 p.m. Eastern Time, excluding holidays, and is staffed with professionals who are familiar with the incident.

The company encourages individuals to remain vigilant and monitor their accounts for any suspicious activity.