The cyber incident creates headline risk and potential liability from patient PHI exposure, even if core operations are unaffected. The proximate CISO/CTO departure suggests internal accountability actions, which may signal deeper security weaknesses. Monitor for class-action lawsuits, regulatory fines (HIPAA), and potential customer churn. The stock could face near-term pressure from reputational damage and uncertainty around the scope of exfiltrated data.
Price Chart
Executive Summary
iRhythm disclosed a material cybersecurity incident in an 8-K filed June 15, 2026. A threat actor exfiltrated proprietary data and patient protected health information from third-party-hosted business applications via social engineering and is demanding payment. The company states it has not impacted clinical systems, patient safety, or financial reporting, and believes the incident is not reasonably likely to have a material financial impact. However, the disclosure comes just 18 days after a CISO/CTO departure, heightening governance concerns.
Key Facts
- On June 8, 2026, iRhythm identified unauthorized activity on third-party-hosted business applications.
- On June 9, a threat actor claimed to have obtained proprietary data and patient PHI; data exfiltration was confirmed.
- The company determined the incident is material on June 10, 2026, based on the volume of potentially affected data.
- The incident was caused by social engineering; clinical/medical device systems and financial reporting systems were not impacted.
- The company maintains cybersecurity insurance but cannot assure coverage will be sufficient.
- A prior 8-K on May 28, 2026 reported an executive departure (CISO/CTO likely) – occurring 18 days before this cyber incident disclosure.
- No ongoing unauthorized access has been identified as of the filing date.
Financial Impact
The company believes the incident is not reasonably likely to have a material impact on financial condition or results of operations. No specific dollar amounts disclosed.
Risk Factors
- Potential class-action litigation from affected patients over PHI exposure.
- Regulatory penalties from HIPAA or state privacy regulators.
- Reputational damage with healthcare provider customers, leading to contract losses.
- Ransom payment or remediation costs exceeding insurance coverage.
- Further disclosure of material details in amended 8-K could reveal broader impact.
Market Snapshot
Investment Themes
Documents Analyzed
This report is based on 4 SEC documents filed with EDGAR.
| Document | Accession Number |
|---|---|
| 8-K Filing (Primary) | 0001388658-26-000055 |
| Document: 0001388658-26-000055-index-headers.html | 0001388658-26-000055 |
| Document: 0001388658-26-000055-index.html | 0001388658-26-000055 |
| Document: 0001388658-26-000055.txt | 0001388658-26-000055 |
Filters
| Type | Now | ||||
|---|---|---|---|---|---|
Aug 11, 2026 7w ago | Insider Cluster | $125.35 $112.88 | ▲ +9.95% | ▲ +8.05% | $110.37 (+11.95%) |
Aug 11, 2026 7w ago | Insider Cluster | $125.35 $112.88 | ▼ −9.95% | ▼ −8.05% | $110.37 (−11.95%) |
Aug 4, 2026 8w ago | Insider Cluster | $127.13 $122.35 | ▼ −3.76% | ▼ −2.52% | $110.37 (−13.18%) |
Jul 6, 2026 12w ago | Insider Cluster | $126.03 $117.17 | ▼ −7.03% | ▼ −6.46% | $110.37 (−12.43%) |
Jun 15, 2026 15w ago | 8-K | $108.84 $112.55 | ▼ −3.41% | ▼ −3.21% | $110.37 (−1.41%) |
Jun 5, 2026 17w ago | 8-K | $108.11 $126.03 | ▲ +16.58% | ▲ +14.72% | $110.37 (+2.10%) |
May 28, 2026 18w ago | 8-K | $115.61 $118.89 | ▲ +2.84% | ▲ +5.98% | $110.37 (−4.53%) |
May 11, 2026 20w ago | 144 | $118.31 $113.94 | ▼ −3.69% | ▼ −1.97% | $110.37 (−6.71%) |
May 4, 2026 21w ago | Insider Cluster | $119.18 $109.17 | ▼ −8.40% | ▼ −14.04% | $110.37 (−7.39%) |
Apr 30, 2026 22w ago | Press Release | $120.80 $109.17 | ▼ −9.63% | ▼ −14.91% | $110.37 (−8.63%) |
US Market Status
Subscribe to SecBot
Get Real-Time SEC Filing Intelligence
Comprehensive SEC filing analysis delivered the moment filings hit EDGAR. Sentiment scoring, impact analysis, and actionable insights for every material event.
Try SecBot Free Coming soon: SecBot Pro with alerts, watchlists, and API access