HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Summary
A recent filing with the Department of Health and Human Services (HHS) indicates that a data breach at iRhythm has affected approximately 8.2 million individuals. Hackers gained access to personal information and data related to iRhythm's accounts and devices, which were hosted by a third-party.
IFF Assessment
FOE
This breach exposes sensitive personal and device data, representing a significant loss for defenders and a win for attackers.
Defender Context
This incident highlights the risks associated with third-party data hosting and the potential impact of breaches on a large scale. Defenders should pay close attention to supply chain security and ensure robust access controls and monitoring are in place for all third-party services handling sensitive data.