iRhythm Holdings Inc. (NASDAQ:IRTC) disclosed a cybersecurity incident involving unauthorized access to data stored on certain third-party-hosted business applications, after a threat actor claimed to have obtained sensitive company and patient information and demanded payment to prevent its public release.

According to an SEC filing filed on Monday, the company activated its cybersecurity response plan immediately after identifying suspicious activity and engaged external advisors and cybersecurity specialists to investigate and contain the incident.

Read Also:

iRhythm Tech's Stock Selloff Went Too Far After Preliminary Update: Analyst

Threat Actor Claimed Access To Sensitive Data

The company said it received communications from a threat actor last week alleging possession of sensitive information, including proprietary company data, patient-protected health information, and other personal information.

The threat actor demanded payment in exchange for not disclosing the data publicly.

Following an investigation, iRhythm confirmed that certain information had ...