iRhythm reports data exfiltration from third-party business apps after cyber incident

• iRhythm flagged a material cybersecurity incident tied to unauthorized activity in certain third-party-hosted business applications, identified June 8.
• A threat actor demanded payment, claiming to hold sensitive data; iRhythm confirmed some data was exfiltrated, including patient health information.
• No impact identified on products, clinical or medical device systems, patient safety, manufacturing, distribution, or financial reporting systems as of June 10.
• No evidence of ongoing unauthorized access; investigation continues into scope, data volume, and affected individuals.
• Incident not expected to materially affect financial condition or results; cybersecurity insurance may cover some losses.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. iRhythm Technologies Inc. published the original content used to generate this news brief via EDGAR, the Electronic Data Gathering, Analysis, and Retrieval system operated by the U.S. Securities and Exchange Commission (Ref. ID: 0001388658-26-000055), on June 15, 2026, and is solely responsible for the information contained therein.