Recent breach and incident updates

iRhythm October 2026 breach notices: understanding the June incident

Illustrative privacy workspace with a phone, laptop and notebook.
AI-created editorial illustration; not a photograph of this incident or an actual app screen.

Updated · MyRecon editorial

An October notification does not necessarily mean an October intrusion. iRhythm's October 2, 2026 update concerns unauthorized access discovered in June, followed by an investigation and review of the affected information.

Incident and notification timeline

In its October 2 company update, iRhythm says data was accessed and downloaded between June 3 and June 8 from certain third-party-hosted business applications. It detected the activity around June 8 and began notifying affected people for whom it had contact information on October 2.

What information was involved

The company lists patient names, contact details, patient account numbers, device serial numbers, insurance numbers, dates of service and dates of birth. It says it does not retain individual financial-account or payment-card information, and had not identified impact to products, clinical or medical-device systems, or patient safety.

Read your own notice carefully

Our practical guidance: retain the notice and identify the categories it says apply to you. A general press release describes an incident across many records; your letter is the better starting point for your own situation. Reach the company through its official website to verify unexpected calls or emails about the incident.

Keep a dated record of questions and responses. If a message asks for credentials, payment or a one-time code to receive breach assistance, verify it independently before responding. Report unfamiliar activity through your provider's established channels.

What a breach search can tell you

MyRecon can check supported published breach records, but a result cannot replace an individual notification. Health-related incidents may not appear in a searchable catalogue. Do not upload medical records or your notification letter into a username or email search field.

Source reviewed October 22, 2026. This summary reflects the linked company statement; later findings may change the scope.

More recent incident updates · Browse the breach archive

Use these checks for your own accounts or work you are authorised to do. MyRecon reports public-source results; a matching handle is not proof that two accounts belong to the same person. See our terms and privacy policy.

More from the MyRecon blog · Browse all guides