iRhythm Data Breach Impact Reaches 8.2 Million Individuals
A filing with the US Department of Health and Human Services has officially placed the total number of individuals affected by a June data breach at wearable cardiac monitoring provider iRhythm at over 8.2 million.
Radwan AbdulhadiEditor and technology writer
HHS Filing Confirms Massive Toll of iRhythm Security Incident
Medical equipment provider iRhythm has seen the official toll of a June 2026 security incident climb to more than 8 million people, according to a recent regulatory filing. Best known for its Zio wearable ECG monitor and expertise in wearable cardiac monitoring technology, the company initially [disclosed] the breach in mid-June. Throughout the investigation, iRhythm maintained that sensitive data might have been stolen from specific third-party-hosted business applications.
As the situation developed, attackers attempted to extort a ransom from the firm, threatening to leak the compromised files publicly. Earlier this month, iRhythm began [sending notification letters] to potentially affected individuals while simultaneously submitting formal notices to state regulators and the US Department of Health and Human Services (HHS).
Details of Compromised Patient Information and Portal Listing
Following these regulatory filings, the incident has officially been recorded on the [HHS data breach portal] as impacting 8,179,772 individuals. This exact count matches the figures that iRhythm previously reported to the Oregon Attorney General’s office.
According to notices issued by the company, the unauthorized third party managed to compromise a wide range of patient records. The exposed data fields include full names, home addresses, dates of birth, email addresses, phone numbers, alongside specific iRhythm account and device details such as account numbers, device serial numbers, insurance information, and dates of service.
Company Response and Identity Theft Risk Assessments
Despite the sheer volume of stolen information, iRhythm has attempted to reassure patients regarding the immediate fallout of the security event. In statements released earlier this month, the enterprise emphasized that it "has no evidence that any personal information has been or will be used to commit identity theft."
The company has proactively encouraged potentially impacted individuals to remain vigilant against medical identity theft and general identity fraud. However, observers note that current notification materials distributed by iRhythm do not mention the provision of free credit monitoring or identity theft protection services.
Operational Impact and Product Safety Assurance
Beyond the exposure of administrative and account information, iRhythm has focused heavily on confirming the integrity of its medical infrastructure. The organization released explicit assurances that core operations have escaped disruption from the breach.
“We have not identified any impact to our products, our clinical or medical device systems, our connections to customers, our manufacturing and distribution operations, patient safety, or our ability to meet patient needs,” the company affirmed in its updates.
Sources
- SecurityWeekHHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Continue chronologically
Related stories
Paradigm Healthcare Data Breach Affects 970,000 Medi-Cal Members
Paradigm Healthcare Services reports a data breach impacting 970,000 Medi-Cal members after an intrusion discovered in October 2025.
Oracle Health Data Breach Impact Climbs to Nearly 20 Million
A report reveals that the cyberattack on Oracle Health's legacy Cerner systems has compromised the personal and medical data of nearly 20 million people.
BigCommerce Warns Merchants of Data Breach via Ribon Apps
BigCommerce alerts merchants to a data breach after attackers compromised third-party Ribon app credentials and injected malicious scripts into online stores.
Frontline Education Breach Exposes Data of 1.3 Million
A Frontline Education breach exposed personal information belonging to more than 1.3 million school staff and students.
