The article describes a cyberattack against iRhythm Holdings involving unauthorized access to third-party-hosted business applications, resulting in the theft of PHI and proprietary data. The specific attack vector, CVSS score, affected software versions, patch information, and workarounds are not detailed in the provided text.
Medical technology company iRhythm Holdings disclosed a cyberattack involving certain third-party-hosted business applications that resulted in the theft of patient protected health information, proprietary data, and other personal data. The company discovered unauthorized activity on June 8, 2026, and launched an investigation with the assistance of external cybersecurity experts. A day later, a threat actor claimed to have obtained “sensitive information, including proprietary data, patient protected health information and other personal information” and demanded payment … More → The post Another healthcare firm attacked days after Novo Nordisk breach appeared first on Help Net Security .