Zero Radar
← feed
HighData breachupdated 29 Oct 2026, 08:33 UTC

iRhythm data breach exposes personal data of 8.2 million people

Hackers got into business software run by a third party and copied people's personal details and iRhythm account and device data. About 8.2 million people may be affected.

1 source, unconfirmed
SeverityHighData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureBe wary of phishing and change your iRhythm account password as a precaution.
How sure is this?1 source, unconfirmedOnly one publisher so far, details may change

How the attack works simplified

  1. 1Hackers targetAttackers aim at third-party hosted business apps
  2. 2Apps accessedBusiness applications hosted by a third party
  3. 3Data stolenPersonal and iRhythm account and device data copied
  4. 4Breach reportedHHS filing puts total at 8.2 million
  5. Result8.2 million people's data exposed

What happened

Attackers stole personal information and iRhythm account and device data from business applications hosted by a third-party provider, according to an HHS filing.

Why it is dangerous: Exposed personal and account data can be used for scams, identity theft, or targeted phishing against patients and customers of iRhythm.

Are you affected?

You are affected if you are a patient or customer whose personal information or iRhythm account and device data was held in the affected third-party-hosted business applications.

What to do

  1. Watch for unexpected emails, calls, or texts asking for personal or account details and do not click unknown links.
  2. Change the password on your iRhythm account and enable multi-factor authentication if available.
  3. Check iRhythm or HHS notices for official guidance on whether your information was involved.

Timeline

  1. 29 Oct 2026, 08:27 UTC
    Publicly disclosed
  2. 29 Oct 2026, 08:27 UTC
    Reported by SecurityWeek · SecurityWeek
  3. 29 Oct 2026, 08:33 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Security press established security newsrooms

Technical details

ID
ZR-b3306983
Disclosed
29 Oct 2026, 08:27 UTC
On Zero Radar
29 Oct 2026, 08:33 UTC (6 min after disclosure)
Last change
29 Oct 2026, 08:33 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

iRhythm data breach exposes personal data of 8.2 million people · Zero Radar