Another healthcare firm attacked days after Novo Nordisk breach

iRhythm Holdings disclosed a June 2026 breach involving social-engineering access to third-party-hosted business applications that led to exfiltration of patient protected health information and proprietary data and an extortion demand; separately, Novo Nordisk revealed attackers copied clinical trial data and a group calling itself Dragonfly claimed to have stolen model checkpoints, datasets, source code, logs and infrastructure artifacts. Both investigations are ongoing and the full scope, affected individuals, and implicated third-party systems have not been publicly disclosed.