iRhythm Holdings disclosed a cybersecurity incident to the SEC on June 16, 2026. This incident involved unauthorized access to data within certain third-party applications.
The breach is reported to have involved patient personal and health information. The exact number of affected individuals, specific data elements, and states affected have not been publicly confirmed. Third-party coverage suggests this was a vendor-related breach involving external vendors.
Details can emerge at a later date, and breach notices may be sent with a delay.