iRhythm Holdings, Inc.
ent_019ecd07714403872deff589f3994c3a
Disclosures
2
State AG · SEC 8-K · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
69,526
as filed · State AG SC
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- iRhythm Holdings, Inc.
- Normalized
- irhythm holdings— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- 0001388658
- Domain
- None on record
Disclosure history (2)newest first
- South Carolina State AGas victim2026-10-06
iRhythm notified South Carolina residents of a cybersecurity incident involving unauthorized access to third-party hosted business applications. Unauthorized access occurred between June 3 and June 8, 2026. Impacted data included names, contact info, patient insurance numbers, dates of service, and dates of birth. iRhythm engaged external forensic professionals and implemented its incident response plan. No evidence of identity theft was found.
- FEDERALSEC 8-Kas victim2026-06-15
iRhythm Holdings, Inc. disclosed a material cybersecurity incident on June 15, 2026. On June 8, 2026, the company identified unauthorized activity involving data on third-party-hosted business applications. A threat actor demanded ransom for proprietary data, patient PHI, and personal information. The company confirmed data exfiltration via social engineering but stated patient safety and clinical systems were unaffected. The incident is ongoing.