Keith H.
iRhythm customer info HACKED
I just received a letter from them stating that they were HACKED back between June 3 to June 8, 2026; here it is October 18, 2026 and I'm just getting notified.Under Maine's Notice of Risk to Personal Data Act, companies must notify you as soon as possible (no later than 30 days); typically when highly sensitive data like a Social Security Number (SSN) was compromised, Here it is more than 90 days after the fact. They claim that name, contact info, address, email, phone number, insurance number, date of service, date of birth. Conveniently they didn't include the fact that the company also has your Social Security Number so they don't have to comply with state laws that require notification when highly sensitive data like a Social Security Number (SSN) was compromised. While companies have offered 1-2 years identity / credit monitoring; NOT iRhythm. Your on your own. Obviously, they have little concern about public relations measures or to mitigate liability in future class-action lawsuits.


