The company told the SEC in June and started telling patients in October
2026-10-14World
iRhythm filed a material cybersecurity incident disclosure in June after attackers downloaded patient data and demanded payment. Notifications began on 2 October. Four months on, the only public measure of scale is state-by-state regulatory filings, and they do not agree.