securityweek.comarticle

iRhythm Data Breach Impacts at Least 360,000 People

iRhythm, a wearable cardiac monitoring provider, is notifying at least 360,000 people (298,647 in Texas, 69,526 in South Carolina) that attackers exfiltrated patient data from third-party-hosted business applications between June 3 and June 8. The stolen data includes names, addresses, emails, dates of birth, phone numbers, account and device serial numbers, insurance numbers and dates of service. The attackers contacted iRhythm on June 9 and threatened to leak the data unless a ransom was paid, according to its SEC filing. The company reports no impact on products, medical device systems or patient safety, and its statement on identity theft suggests it paid.