Got a notice from iRhythm? Here’s what to do.
iRhythm recently reported a data exposure affecting individuals in South Carolina. If you received a notification, it means your personal information may have been involved. Understanding these details is key to protecting yourself moving forward.
Your checklist
- 1
Keep the letter
Save the notice from iRhythm and its envelope. The date you were told can matter for legal deadlines.
- 2
Freeze your credit
The filing does not list what was taken, so play it safe. A free freeze at Equifax, Experian and TransUnion stops new accounts being opened in your name.
- 3
Change reused passwords
Change any password you used with this company or reused elsewhere, and turn on two-factor sign-in.
- 4
Get a free claim review
Our legal team checks whether you can be paid for this breach. No fee unless you recover.
Step 4: free claim review
Tell us you got the iRhythm notice. An attorney, not a call center, reads it and tells you plainly whether you have a claim.
- Free, no obligation
- No fee unless you recover
- Reply within 24 hours
About the iRhythm breach
- Reported to
- South Carolina Attorney General
- Date filed
- October 6, 2026
- People notified
- Not stated
- Cause in filing
- Not stated
You've received a letter from iRhythm about a recent data exposure, reported on October 6, 2026, in South Carolina. This notification means that your personal information was part of an incident they are currently monitoring.
It can be worrying to learn that your personal data may have been accessed without your permission. This letter is your official notice, and it's important to take it seriously to help protect yourself from potential future risks.
Your first step should be to carefully read the entire notification letter from iRhythm. It should explain what personal information was involved in this incident and what actions the company suggests you take. Make sure you understand all the details.
After reviewing the letter, keep a close watch on any accounts connected to your personal information. Look for unexpected emails, texts, or calls that seem suspicious. Be cautious about clicking links or opening attachments from unknown senders.
If you're concerned about your personal information, a credit freeze can be a powerful tool to prevent new accounts from being opened in your name. Many people also find it helpful to change passwords for online accounts, especially if you reuse them across different services.
Dealing with a data exposure can feel overwhelming, but you don't have to navigate it alone. Our team can help you understand your options and review your situation for free. There's no obligation, just clear information to help you decide your next steps.
iRhythm data breach questions
- Is the iRhythm data breach letter legit or a scam?
- A notice from iRhythm in the mail matches the breach iRhythm reported to the South Carolina Attorney General on October 6, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact iRhythm through a phone number or website you find yourself.
- Did iRhythm offer free credit monitoring?
- Check your letter from iRhythm. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Using the free service won't stop you from joining a lawsuit or settlement later.
- Is there a iRhythm data breach class action lawsuit?
- Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against iRhythm. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
- What should I do after getting the iRhythm data breach notice?
- Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
- Where can I see the official iRhythm breach notice?
- iRhythm's report is published by the South Carolina Attorney General: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter-%20iRhythm.pdf Compare it with the letter you received to confirm the dates and details match.
- Do I need a iRhythm data breach lawyer or attorney?
- An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
- Can I sue iRhythm over the data breach?
- It depends on what was exposed, the law in South Carolina and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
- How much could a iRhythm data breach settlement or claim be worth?
- There is no set amount, and no iRhythm settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. Keep receipts and records; they're what damages claims are built on.
Other notices sent in South Carolina
- Frontline EducationSouth Carolina Attorney General · Filed October 27, 2026Count not stated
- Navigate360, LLCSouth Carolina Attorney General · Filed October 27, 2026Count not stated
- AssuranceAmerica Managing General Agency, LLCSouth Carolina Attorney General · Filed October 14, 2026Count not stated
- JM Bullion, Inc.South Carolina Attorney General · Filed October 13, 2026Count not stated
- World Acceptance CorporationSouth Carolina Attorney General · Filed September 30, 2026Count not stated
- Midvale Indemnity CompanySouth Carolina Attorney General · Filed September 30, 2026Count not stated
Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.