[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fa-L8EKqjswCLLtfbhC9pYNtmiMdbK0-j6vEwNaG5ggM":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"0b5da2ae-6f07-40de-9453-d71ebe3eec0e","iRhythm Data Breach Impacts at Least 360,000 People","irhythm-data-breach-impacts-at-least-360-000-people-7efaee","Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers. The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek.","Medical device company iRhythm is notifying over 360,000 individuals about a data breach that occurred between June 3 and June 8. Hackers accessed and exfiltrated patient data, including names, addresses, dates of birth, and phone numbers, from third-party-hosted business applications. The company has no evidence the data has been misused for identity theft, and stated the incident does not impact products, clinical systems, or patient safety.","iRhythm data breach exposes personal information of over 360,000 patients.","https:\u002F\u002Fwww.securityweek.com\u002Firhythm-data-breach-impacts-over-360000-people\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F06\u002FiRhythm.jpeg","2026-10-12T11:05:43+00:00","2026-10-12T12:00:16.055268+00:00",7,[17],{"name":18,"type":19},"iRhythm","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":20,"icon":22,"name":23,"slug":24},null,"Breaches","breaches",[26,28,33,38],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":46,"vendors":131},[47,76,102],{"slug":48,"name":49,"problem":50,"products":51},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"slug":77,"name":78,"problem":79,"products":80},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[81,89,94],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":90,"product_name":91,"url":92,"description":93},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"slug":103,"name":104,"problem":105,"products":106},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[107,115,123],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",[],{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":148},"irhythm-breach-third-party-app-risk-exposes-360000-patients","iRhythm Breach: Third-Party App Risk Exposes 360,000 Patients","Hackers accessed and exfiltrated sensitive patient data from third-party-hosted business applications used by iRhythm, a medical device company, over a five-day window in June. The root issue lies in insufficient oversight of third-party vendors and the applications they host, which created a blind spot in iRhythm's security perimeter. In healthcare, where patient data carries heightened regulatory and ethical sensitivity, third-party risk is especially dangerous because breached data can enable identity theft, insurance fraud, and targeted phishing. This incident underscores that organizations are only as secure as their weakest external dependency — and that vendor-hosted environments require the same rigorous controls as internal systems.",[137,138,139,140,141,142,143,144,145,146,147],"NIST SP 800-161 (Supply Chain Risk Management)","NIST CSF PR.AC-3 (Remote Access Management)","NIST CSF DE.CM-6 (External Service Provider Monitoring)","CIS Control 15 (Service Provider Management)","CIS Control 3 (Data Protection)","CIS Control 6 (Access Control Management)","HIPAA §164.308(a)(1) (Security Risk Analysis)","HIPAA §164.308(b)(1) (Business Associate Contracts)","GDPR Article 28 (Processor Obligations)","GDPR Article 32 (Security of Processing)","HITRUST CSF Control Category 09.ab (Monitoring System Use)",{}]