iRhythm Technologies confirms June data breach impacted 8 point 2 million individuals

Wearable cardiac device manufacturer iRhythm Technologies has confirmed that a June 2026 data breach impacted 8.2 million individuals. The HIPAA Journal reported that sensitive patient data was stolen during the incident. The California-based company manufactures heart monitoring devices used by millions of patients nationwide. [1]

The company had not previously confirmed the total number of affected individuals following the cybersecurity incident. State attorneys general recently began releasing disclosures showing impacted residents, with state counts reaching at least 368,000 individuals shortly before the full scale was disclosed, according to the HIPAA Journal. [1]

The theft or compromise of sensitive personal and medical records remains a primary target for unauthorized access across major organizations. Data breaches are frequently carried out through unauthorized external system access and hacking, as noted in general security incident compilations. [8]