iRhythm Technologies provided an update regarding a previously disclosed cybersecurity incident where unauthorized actors accessed third-party-hosted business applications. The forensic investigation revealed that patient data was accessed and downloaded without authorization during a breach window between June 3 and June 8, 2026. Compromised information includes patient names, contact details, account numbers, device serial numbers, insurance information, dates of service, and dates of birth. iRhythm confirmed that the incident did not impact its core products, medical or clinical systems, manufacturing, distribution, or patient safety. The company stated that it does not retain payment card or financial account data, and it maintains that the security event is unlikely to cause a material financial impact.

Full report : The cardiac monitoring company stated that an earlier cybersecurity incident compromised patient details, though clinical systems and financial operations remained unaffected.