HighData breachMonitoringMedia reported· updated Nov 11
US cardiac monitoring firm iRhythm hit by social engineering and extortion; data of over 8.18 million exposed
According to CyberInsider, data was downloaded without authorization from cardiac monitoring firm iRhythm's third-party-hosted business applications between June 3 and 8, 2026; its June 15 SEC filing says access came through social engineering and an attacker demanded payment on June 9 .