iRhythm discloses material cybersecurity breach exposing patient health data and proprietary info

Filed June 15, 2026 · Period ending June 10, 2026 · ~1 min read

Key Changes

• high

  Threat actor exfiltrated patient protected health information and proprietary data through social engineering attack on third-party business applications, demanding ransom payment to prevent public disclosure.

  Item 1.05 verify on EDGAR →
• high

  Company determined incident material on June 10 based on volume of potentially affected data, triggering immediate 8-K disclosure within days of detection.

  Item 1.05 verify on EDGAR →
• medium

  Core operations including medical devices, patient safety, manufacturing, distribution, and financial reporting systems remain unaffected by the breach.

  Item 1.05 verify on EDGAR →