iRhythm Holdings, Inc. disclosed a material cybersecurity incident on June 15, 2026. On June 8, 2026, the company identified unauthorized activity involving data on third-party-hosted business applications. A threat actor demanded ransom for proprietary data, patient PHI, and personal information. The company confirmed data exfiltration via social engineering but stated patient safety and clinical systems were unaffected. The incident is ongoing.