An update after the investigation
On October 2, 2026, iRhythm said it had completed its investigation into an incident detected on June 8. The company says unauthorised individuals accessed certain third-party-hosted business applications and downloaded data between June 3 and June 8. Its statement describes the data reviewed and the start of individual notifications.
Patient information involved
According to iRhythm, the data may include a patient’s name and contact details, account number, device serial number, insurance number, date of service and date of birth. This concerns business applications; the statement does not say heart-monitoring devices were compromised. The company says it has no evidence that personal information was used to commit fraud.
What the 360,000 figure means
SecurityWeek reports that more than 360,000 people are affected, based on notices filed with US state authorities. The count depends on available filings and may change. iRhythm’s statement does not provide a complete total. It is therefore more accurate to describe this as a reported minimum than a final, certified count.
Steps for affected people
People who receive a notice should follow the guidance specific to their situation, review account statements and be cautious of unexpected requests for medical or financial information. Healthcare teams can remind patients which communication channels are official. Avoid following a link in a message before checking its source.
The connection with Soclyde
A password manager cannot prevent data from being extracted from a third-party business application. Soclyde can help users protect accounts with unique passwords and reduce credential reuse. Application security, supplier controls and health data protection require additional measures suited to each organisation.
Key points
iRhythm confirmed that personal information was downloaded from certain business applications, with public state filings and reporting indicating more than 360,000 affected people. To protect accounts that may be involved, read our guide to creating unique passwords.
