iRhythm Confirms Data Theft After Social-Engineering Attack
Summary
iRhythm says social engineering led to unauthorized activity involving third-party-hosted business applications and confirms some data was stolen. The data type and number of affected people remain unknown; clinical systems and operations were unaffected.
Key points
- iRhythm detected unauthorized activity involving data in certain third-party-hosted business applications on June 8.
- The company said the attack involved social engineering, but has not named the targeted application.
- iRhythm confirmed some data was stolen. The attacker claimed it included proprietary information and patients’ protected health information, but iRhythm has not confirmed that description.
- The attacker demanded a ransom to prevent leaked files; no known ransomware or extortion group has claimed responsibility.
- iRhythm is investigating with external cybersecurity experts and has not determined the data types or number of people affected.
- The company said clinical and medical-device systems, manufacturing and distribution, patient safety, and financial reporting were not impacted.
Article Details
- Victim Organization
- iRhythm
- Incident Type
- Cyberattack involving social engineering and unauthorized activity in data maintained on third-party-hosted business applications; iRhythm confirmed that some data was stolen.
- Data Types Exposed
- Some data was confirmed stolen; the specific data types are undetermined. The threat actor claimed the files included proprietary data and patients’ protected health information, but iRhythm has not confirmed that description.
- Affected Records
- Not yet determined.
- Affected Data Size
- Not yet determined.
- Operational Impact
- iRhythm said its products, clinical and medical device systems, manufacturing and distribution operations, patient safety, and financial reporting systems were not impacted.
- Ransom Or Extortion
- The threat actor reportedly demanded a ransom to prevent the files from being leaked. It is unclear whether iRhythm paid or engaged with the hackers.
- Claim Status
- confirmed