Hundreds of thousands impacted by data breach at biosensor firm iRhythm

iRhythm disclosed a June 3–8 incident where attackers used social engineering to access third-party business applications and exfiltrate data for at least 360,000 individuals, including names, contact details, patient account and device serial numbers, insurance numbers, dates of service, and dates of birth; the threat actor demanded payment and the company says clinical systems and devices were not affected.