Ma'lumotlar buzilishi
HHS ma'lumotlari iRhythm ma'lumotlar buzilishi 8,2 million kishiga ta'sir qilganini ko'rsatmoqda
Xakerlar shaxsiy ma'lumotlar va iRhythm hisob hamda qurilma ma'lumotlarini uchinchi tomon tomonidan joylashtirilgan biznes ilovalaridan o'g'irlashdi.
Muallif
Ionut Arghire
| 2026-yil 29-oktabr (ET 4:27)
2026-yil iyun oyida tibbiy uskunalar yetkazib beruvchi iRhythm kompaniyasida sodir bo'lgan ma'lumotlar buzilishi natijasida 8 milliondan ortiq kishi zarar ko'rdi.
Kompaniya, kiyinadigan yurak monitoringi texnologiyasiga ixtisoslashgan va eng mashhur Zio kiyinadigan EKG monitori bilan tanilgan, hodisani iyun o'rtalarida e'lon qildi.
iRhythm boshidanoq ma'lum qildiki, ma'lum uchinchi tomon tomonidan joylashtirilgan biznes ilovalaridan sezgir ma'lumotlar o'g'irlangan bo'lishi mumkin va xakerlar ma'lumotlarni oshkor qilish bilan tahdid qilib, to'lov talab qilishga urinishgan.
Shu oy boshida kompaniya potentsial ta'sirlangan shaxslarga xabar berish xatlarini yuborishni boshladi va bir nechta shtatlarda, shuningdek AQSh Sog'liqni saqlash va inson xizmatlari departamenti (HHS) bilan tartibga soluvchilarga xabar berdi.
Hodisaga endi HHS ma'lumotlar buzilishi portalida 8 179 772 kishiga ta'sir qilgan deb ro'yxatga olingan, bu raqam iRhythm avval Oregon Bosh prokurori idorasiga xabar qilgan.
iRhythmning avvalgi xabarlariga ko'ra, xakerlar bemorlarning ismlari, manzillari, tug'ilgan sanalari, elektron pochta manzillari, telefon raqamlari va iRhythm hisob hamda qurilma ma'lumotlarini (shu jumladan hisob/seriya/sug'urta raqamlari va xizmat ko'rsatish sanalari) buzib kirishgan.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
"iRhythm shaxsiy ma'lumotlar shaxsni aniqlash o'g'irligi uchun ishlatilgan yoki ishlatilishi haqida hech qanday dalilga ega emas", deb aytdi kompaniya shu oy boshida.
Shuningdek, u potentsial ta'sirlangan shaxslarga tibbiy shaxsni aniqlash o'g'irligi va shaxsni aniqlash firibgarligidan himoyalanishni tavsiya qildi, ammo uning xabari bepul shaxsni aniqlash o'g'irligi yoki kredit monitoringi xizmatlari haqida eslatmaydi.
"Biz mahsulotlarimiz, klinik yoki tibbiy qurilma tizimlarimiz, mijozlar bilan aloqalarimiz, ishlab chiqarish va tarqatish operatsiyalarimiz, bemor xavfsizligi yoki bemor ehtiyojlarini qondirish qobiliyatimizga hech qanday ta'sir aniqlamadik", deb aytdi kompaniya.
Bog'liq: Sotuvchi kalitining sizib chiqishi Denver Health Plan a'zolarining 238 000 ma'lumotlarini xavf ostiga qo'yadi
Bog'liq: Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini oshkor qildi
Bog'liq: Capcom ma'lumotlar buzilishi 11 million kishiga ta'sir qildi
Bog'liq: Quest Diagnostics ma'lumotlar buzilishi "ma'lum bemor yozuvlari"ni oshkor qildi
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik xabarlar axborotnomasi
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Xakerlar yangi Oracle EBS zaifligini tekshirishni boshladi
- Sotuvchi kalitining sizib chiqishi Denver Health Plan a'zolarining 238 000 ma'lumotlarini xavf ostiga qo'yadi
- HPE tarmoq mahsulotlarida o'nlab muhim kamchiliklarni tuzatdi
- Tushuntirilmagan DreamHost hodisasi elektron pochta, FTP parollarini qayta o'rnatishga majbur qildi
- O'lik Popcorn Time yangilovchisi millionlab kompyuterlarni egallash xavfiga duchor qildi
- Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini oshkor qildi
- 953 onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida zararlangan
- Golland politsiyasi NFC relay hujumlari orqali bank hisoblaridan 400 000 dollardan ortiq pulni o'g'irlagan ikki kishini hibsga oldi
So'nggi yangiliklar
- Xitoylik xakerlar past darajadagi ESXi jurnal yozish kamchiligini nol kun sifatida jimgina ishlatishdi
- Ukrain Hive va Nefilim to'lov dasturi sherigi AQShda 70 oy qamoq jazosiga hukm qilindi
- Upwind Security 3,8 milliard dollar bahoda 400 million dollar jalb qildi
- Chrome va Firefox yangilanishlari 200 dan ortiq zaiflikni tuzatdi
- GoAhead veb-serverida yuzlab million qurilmalarda ishlatiladigan TLS kamchiliklari topildi
- Xitoy bilan bog'liq xakerlar PHP2Shell orqali xavfsizlik devorlarini buzishdi
- Uzoq yashiringan kamchiliklar EPICS tadqiqot muassasasi nazorat dasturida tuzatildi
- Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Biz baribir unga tayanamiz.
Trend
Tailscale Rushes Patches After Uncoordinated Disclosure of 'Tailworm' Flaws
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
HPE Patches Dozens of Critical Flaws in Networking Products
PHP2Shell Exploitation Moves From Probes to Working Shells
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
Kundalik xabarlar axborotnomasi
So'nggi tahdidlar, tendentsiyalar va texnologiya haqida xabardor bo'lish, shuningdek soha mutaxassislarining tushuntiruvchi ustunlari bilan tanishish uchun SecurityWeek elektron pochta axborotnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Agentik Pentesting for a Stronger CTEM Program
2026-yil 4-noyabr
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyaga qo'shiling va agentik pentestingni o'rganing hamda CTEM dasturingizda uzluksiz ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 Summit
2026-yil 10 va 11-noyabr
CISOlar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini birlashtirgan holda amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiruvchi masalalarni ko'rib chiqish uchun bizga qo'shiling.
Ro'yxatdan o'ting
Harakatdagi odamlar
Quantum eMotion Wayne Teepleni CTO etib tayinladi.
Guy Ellis NCC Group bosh direktori etib tayinlandi.
Noma Security Bobby Shokerni CFO va Alberto Rodriguesni CCO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Biz baribir unga tayanamiz.
B2B bitimlarini deyarli har birini nazorat qiladigan jarayon — yuboruvchining o'zini o'zi baholashi, qabul qiluvchining qabul qilishi. Nihoyat kompaniyalar o'rtasida ishonch uchun yaxshiroq asos paydo bo'ldi. (Sravish Sridhar)
Bu yaxshi: NetScaler nol kunlari bizga yangi normal haqida nima aytadi
Yaqinda Citrix NetScaler yamog'lari chiqarilsa, yamash quvurlarini tayyor saqlang. (Tod Beardsley)
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklik
Sizning ishlab chiquvchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Kontekst zamonaviy kiberhujumlarga qarshi kurashda qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni ulash, keyingi qadamni oldindan bilish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaiflikni aniqlash va ekspluatatsiyani tezlashtirganda, virtual yamash hali ham chuqur himoya va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Data Breaches
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.
By
Ionut Arghire
| October 29, 2026 (4:27 AM ET)
*
More than 8 million people were impacted by a June 2026 data breach at medical equipment provider iRhythm.
The company, which specializes in wearable cardiac monitoring technology and is best known for its Zio wearable ECG monitor, disclosed the incident in mid-June.
iRhythm said right from the start that sensitive information might have been stolen from certain third-party-hosted business applications and that the hackers attempted to extort a ransom, threatening to leak the compromised data.
Earlier this month, the company started sending notification letters to the potentially affected individuals and filed notices with regulators in several states, as well as with the US Department of Health and Human Services (HHS).
The incident has now been listed on the HHS data breach portal as affecting 8,179,772 individuals, a number iRhythm previously reported to the Oregon Attorney General’s office.
Per iRhythm’s previous notices, the hackers compromised patients’ names, addresses, dates of birth, email addresses, phone numbers, and iRhythm account and device data (including account/serial/insurance numbers and dates of service).
Advertisement. Scroll to continue reading.
“iRhythm has no evidence that any personal information has been or will be used to commit identity theft,” the company said earlier this month.
It also encouraged potentially affected individuals to protect themselves against medical identity theft and identity fraud, but its notice does not mention free identity theft or credit monitoring services.
“We have not identified any impact to our products, our clinical or medical device systems, our connections to customers, our manufacturing and distribution operations, patient safety, or our ability to meet patient needs,” the company said.
Related:Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
Related:Genesys Hack Exposes Customer Data From Internal Systems
Related:11 Million Impacted by Capcom Data Breach
Related:Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Hackers Start Probing Fresh Oracle EBS Vulnerability
- Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
- HPE Patches Dozens of Critical Flaws in Networking Products
- Unexplained DreamHost Incident Prompts Email, FTP Password Resets
- Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
- Genesys Hack Exposes Customer Data From Internal Systems
- 953 Online Stores Infected in Long-Lasting Malware Campaign
- Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
Latest News
- Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
- Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
- Upwind Security Raises$400 Million at$3.8 Billion Valuation
- Chrome and Firefox Updates Patch Over 200 Vulnerabilities
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
- China-Linked Hackers Exploit PHP2Shell to Root Firewalls
- Long-Hidden Flaws Patched in EPICS Research Facility Control Software
- Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
Trending
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
HPE Patches Dozens of Critical Flaws in Networking Products
PHP2Shell Exploitation Moves From Probes to Working Shells
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Quantum eMotion has named Wayne Teeple as CTO.
Guy Ellis has been appointed CEO of NCC Group.
Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.
More People On The Move
Expert Insights
*
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)