iRhythm Breach Could Affect 8.2 Million, Oregon Filing Says
Summary
An Oregon filing put the potential scope of iRhythm's breach at 8.2 million people. The company previously told the SEC that a threat actor stole patient health information, personal information and proprietary data, then demanded payment.
Key points
- An Oct. 6 filing with the Oregon attorney general gave the breach's scope as 8.2 million people, potentially encompassing every iRhythm user.
- iRhythm told the SEC in a June 10 filing that a threat actor stole proprietary data, protected health information and other personal information.
- The threat actor demanded undisclosed payment in exchange for not publicly releasing the stolen data.
- The company did not disclose whether it paid the extortion demand.
Article Details
- Victim Organization
- iRhythm Technologies
- Incident Type
- Data breach and extortion
- Data Types Exposed
- Proprietary data
- Patient protected health information
- Other personal information
- Affected Records
- 8.2 million individuals potentially affected, according to the reported scope in the Oregon filing
- Ransom Or Extortion
- The company said a threat actor demanded an undisclosed payment in exchange for not publicly releasing stolen data. Whether iRhythm paid was not disclosed.
- Claim Status
- confirmed