iRhythm, a well being firm specializing in wearable cardiac monitoring know-how, has been focused in a cyberattack that resulted within the theft of knowledge.
The information breach was disclosed by iRhythm, identified for its Zio wearable ECG monitor, in a Monday submitting with the SEC.
The corporate mentioned it detected “unauthorized exercise involving knowledge maintained on sure third-party-hosted enterprise functions” on June 8. iRhythm famous that the assault concerned social engineering, however the focused software has not been named.
A menace actor contacted the corporate on June 9, claiming to have stolen delicate data, together with proprietary knowledge and sufferers’ protected well being data. The hackers demanded a ransom to stop the compromised information from being leaked.
iRhythm has been working with exterior cybersecurity specialists to research the breach, and it has confirmed that some knowledge has been stolen, however it has not mentioned whether or not the menace actor’s description of the compromised knowledge is correct.
The medical gadget vendor remains to be engaged on figuring out what number of people are affected, in addition to what sort and the way a lot knowledge was stolen.
The corporate mentioned its merchandise, medical or medical gadget techniques, manufacturing and distribution operations, affected person security, and monetary reporting techniques weren’t impacted.
“The incident doesn’t contain the Firm’s medical or medical gadget techniques or connections to clients and the Firm doesn’t retailer or retain particular person monetary account data or fee card data,” it famous in its SEC submitting.
No identified ransomware or extortion group seems to have taken credit score for the assault on iRhythm.
It’s unclear whether or not the corporate has agreed to pay a ransom or engaged with the hackers.
SecurityWeek has reached out to iRhythm for extra data and can replace this text if it responds.
Associated: Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters
Associated: Cybercrime Group Claims Novo Nordisk Hack
Associated: French Authorities Messaging Platform Breached by Mysterious ‘Misere’ Hacker
Associated: ShinyHunters Claims Council of Europe Hack
