Science & Tech · Cybersecurity · 7 hrs ago
iRhythm Data Breach Affects at Least 360,000 People
iRhythm, a digital healthcare company that provides wearable heart monitors and related data services, is notifying people that hackers stole their information.
The breach involved third-party-hosted business applications holding iRhythm data.
The company says the hackers accessed and copied patient data from June 3 to June 8, and the breach was identified on June 8.
The exposed information may include names, contact details, dates of birth, and account, device, insurance and service details.
State notices identify at least 360,000 affected people in Texas and South Carolina, and the total may be higher.
iRhythm says it has no evidence the stolen information has been or will be used for identity theft, and that its products, medical systems and patient services were not affected.
iRhythm is notifying more than 360,000 people that hackers stole their personal information.
The company said hackers accessed and took patient data from third-party-hosted business applications between June 3 and June 8.
At least 360,000 people were affected, including 298,647 in Texas and 69,526 in South Carolina.
The compromised information includes patient contact and birth details, as well as account, device, insurance and service data.
iRhythm said it has no evidence that the stolen information has been or will be used for identity theft.
- Who
- iRhythm and the patients whose information was stolen.
- What
- Hackers accessed and exfiltrated patient and account data from applications hosted by a third party. At least 360,000 people were affected.
- When
- The data was accessed between June 3 and June 8. iRhythm identified the breach on June 8.
- Where
- The breach involved third-party-hosted business applications. Notices listed affected people in Texas and South Carolina.
- Why
- The hackers’ motive is not stated. iRhythm said the hackers threatened to leak the information unless a ransom was paid.
This story does not have two clearly opposing sides.
As iRhythm previously reported, the company has not identified any impact to our products, our clinical or medical device systems, our connections to customers, our manufacturing and distribution operations, patient safety, or our ability to meet patient needs
has been or will be used to commit identity theft
Hackers accessed and exfiltrated patient data from affected applications.
iRhythm identified the data breach.
The hackers contacted iRhythm and threatened to leak the stolen information unless a ransom was paid.
iRhythm filed data breach notices with regulators in several states.
- People affected
- At least 360,000
- Texas
- 298,647 people
- South Carolina
- 69,526 people
- Data access period
- June 3–8
- Compromised data
- Names, addresses, email addresses, dates of birth, phone numbers, account and device details, insurance numbers and dates of service
Sources
Related news
Cyberattack defrosts refrigerators at French supermarket chains
Ledger confirms tampered wallets linked to CryptoBilis fund thefts
Malware incident at contractor may expose 8.7 million karaoke records
Critical SonicWall flaw faces exploitation days after patch
Cyberattack disrupts refrigeration systems at French supermarkets
Canadian cybersecurity executive arrested on federal extortion charges
Albert Heijn systems remain offline after cybersecurity incident
Attacks disrupt Yandex services and its data centers in Russia
Canadian cybersecurity executive arrested in FBI ShinyHunters investigation
Cyberattacks disrupt French supermarket freezers and Dutch-Belgian retail operations
Exposure management shifts cybersecurity focus from controls to risk
