Hundreds of thousands impacted by data breach at biosensor firm iRhythm

What happened

A company known for wearable cardiac sensors, iRhythm, has begun notifying states of the impact of a data breach (an incident in which data leaves an organisation without permission) from the summer. The company began filing breach notices in multiple states this week, telling regulators and victims that the incident occurred on June 8 and involved unauthorized access to third-party systems.

iRhythm also filed breach notices in California . iRhythm is best known for Zio Patch — a sensor that patients wear on their chest for long-term continuous cardiac monitoring and heart arrhythmia detection.

The company said 298,647 people in Texas had information stolen alongside another 69,526 in South Carolina . A company spokesperson declined to say the full number of victims, telling Recorded Future News that iRhythm “responded promptly after detecting the unauthorized access and, once the scope was verified, notified affected individuals and applicable regulators.” “The incident did not affect iRhythm clinical systems or medical devices and did not result in a loss of service or disruption to operations,” the spokesperson said.