Breach · · 2 min read
iRhythm breach: heart-monitor patients’ details taken
The maker of Zio heart monitors says hackers took patient names, contact details, birth dates and insurance numbers from outside-hosted business apps in June. At least 360,000 affected.
iRhythm, the company behind the Zio wearable heart monitors, is notifying patients that hackers stole their personal information in June. State filings show at least 360,000 people affected, and the real number is likely higher. If you wore an iRhythm heart monitor, here’s what to know.
What happened
SecurityWeek reports that iRhythm identified the breach on June 8, 2026. It involved business applications hosted by a third party that stored some iRhythm information. Hackers accessed and took patient data from those apps between June 3 and June 8.
The stolen information includes:
- names, addresses, email addresses and phone numbers
- dates of birth
- iRhythm account and device data, such as account numbers, device serial numbers, insurance numbers and dates of service
Filings with state regulators list 298,647 people in Texas and 69,526 in South Carolina, so at least 360,000 in total. In a June filing with the U.S. Securities and Exchange Commission, iRhythm said the hackers contacted it on June 9 and threatened to leak the data unless a ransom was paid. The company now says it has no evidence the information has been or will be used for identity theft. iRhythm says its devices, clinical systems and patient care were not affected.
What this means for you
This doesn’t appear to include Social Security numbers or heart data. But an insurance number and the date you wore a monitor are enough to make a fake billing call or “your device needs to be returned” email sound real.
What you can do
- Look for iRhythm’s letter and follow the steps it gives, using the contact details inside it.
- Check your insurer’s statements for services or equipment you don’t recognize.
- Be careful with calls or emails about your monitor or bill. Call the number on your insurance card or an iRhythm statement instead of one given in the message.
- Read up on scams built from leaked data: how scammers use leaked data.
How Frame helps
Frame keeps a catalog of known breaches. Add the ones you know you were part of to a verified email and Frame shows what each exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. We never collect or store the leaked records themselves.
Sources
- SecurityWeek, iRhythm Data Breach Impacts at Least 360,000 People, October 12, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.