iRhythm Confirms Data Stolen in Hack

SecurityWeek

June 16, 2026 at 3:06 PM

Overview

iRhythm, a digital health company, confirmed that it experienced a data breach after discovering the incident on June 8. The attackers demanded a ransom, indicating that sensitive information may have been accessed or stolen. While the company has not detailed the specific data affected, this incident raises concerns about the security of health-related data and the potential risks to patients and customers. Cyberattacks like this can undermine trust in digital health solutions and expose individuals to identity theft or privacy violations. Companies in the healthcare sector need to strengthen their cybersecurity measures to protect sensitive information from similar threats.

Key Takeaways

Timeline: Disclosed on June 8, 2023

Original Article Summary

The digital health company said it learned of the breach on June 8 and the attackers demanded a ransom. The post iRhythm Confirms Data Stolen in Hack appeared first on SecurityWeek.

Impact

Not specified

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Disclosed on June 8, 2023

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Ransomware, Data Breach.

Read Original Article

Related Coverage

Fifteen JetBrains Marketplace Plugins Found Stealing API Keys

Infosecurity Magazine

Aikido Security has found that at least 15 plugins available on the JetBrains Marketplace are stealing API keys from users. These malicious plugins disguise themselves as legitimate tools for integrated development environments (IDEs) but are designed to extract sensitive information. This situation affects developers who rely on these plugins for their work, potentially exposing their projects and personal data. The discovery raises concerns about the security of third-party plugins and the need for vigilance among users when downloading software. Developers should review their installed plugins and consider removing any that might be suspicious.

Jun 17, 2026

Oracle’s Second Monthly Security Updates Deliver 245 Patches

SecurityWeek

Oracle has rolled out its June 2026 Critical Security Patch Update, addressing a total of 245 vulnerabilities across various products, including Communications, E-Business Suite (EBS), and Enterprise Manager. This update is crucial as it aims to protect users from potential exploitation of these vulnerabilities, which could lead to unauthorized access or data breaches. The large number of patches indicates a significant risk across multiple platforms, making it essential for organizations using these products to apply the updates promptly. By doing so, they can safeguard their systems against possible attacks that may target these weaknesses. Users are encouraged to review the specific patches applicable to their environments and implement them as soon as possible to enhance their security posture.

Jun 17, 2026

Malicious apps got into the Arch User Repository - how to protect yourself

144 Mastra npm Packages Compromised via Hijacked Contributor Account

The Hacker News

Researchers have uncovered a software supply chain attack affecting 144 npm packages linked to the Mastra namespace, which is used for building AI applications. The attack, identified by JFrog, SafeDep, Socket, and StepSecurity, involved the hijacking of a single npm account belonging to a user named 'ehindero', who then published malicious versions of these packages. This incident raises significant concerns for developers who rely on the Mastra framework, as it could lead to the introduction of vulnerabilities in their applications. Users of these compromised packages are urged to check their dependencies and update to secure versions to avoid potential risks. This event serves as a reminder of the importance of securing contributor accounts in open-source ecosystems.

Jun 17, 2026

Joomla, LiteSpeed Vulnerabilities Exploited in Attacks

SecurityWeek

Recent vulnerabilities found in Joomla and LiteSpeed have been exploited by attackers to execute arbitrary PHP code on shared hosting servers. This means that intruders can potentially gain root access, which allows them to take complete control of affected systems. Websites running Joomla or using LiteSpeed as their web server are particularly at risk. This situation highlights the pressing need for website administrators to ensure their systems are up-to-date and to implement necessary security measures. Failure to address these vulnerabilities could lead to significant data breaches and service disruptions for users.

Jun 17, 2026

Security Community Slams US Ban on Exporting Mythos, Fable

darkreading

A group of security experts has expressed strong opposition to the U.S. government's recent ban on exporting Anthropic's AI models, specifically Claude Fable 5 and Mythos 5. In an open letter, the experts argue that these export restrictions hinder progress in the field of artificial intelligence and could have negative implications for research and development. They believe that limiting access to these advanced models could stifle innovation and collaboration among researchers. This situation raises concerns about the balance between national security and the advancement of technology, as the ban could impact various sectors that rely on AI advancements. The experts are urging the government to reconsider these restrictions to foster a more open and collaborative environment in AI research.

Jun 16, 2026