iRhythm breach exposes patient data after social engineering attack

iRhythm, a health company specializing in cardiac monitoring, disclosed a data breach involving unauthorized access to third-party-hosted business applications. The incident, reported on June 8, included social engineering tactics and resulted in the theft of sensitive patient information. The hackers have demanded a ransom to prevent data leaks. iRhythm is cooperating with cybersecurity experts to assess the breach's impact, confirming that its clinical systems and patient safety operations were unaffected.

No ransomware group has claimed responsibility, and it remains unclear if a ransom was paid. iRhythm aims to ascertain how many individuals were affected and the extent of the stolen data.