The week in health tech, explained in plain English.Get the free newsletter →
September 16, 2026

Takeaways from the most recent news in the technology and policies shaping healthcare.

Health IT

IRhythm Probes Cybersecurity Incident on Zio Maker

IRhythm Holdings, the maker of the Zio cardiac monitoring patch, has identified a cybersecurity incident and is investigating it with outside experts, according to Becker's Hospital Review. The company said it activated its incident response plans on June 15 after detecting the breach and is working with external advisors to assess the scope.

Key details remain unknown. IRhythm has not specified when the incident occurred or what data may have been exposed. That gap is typical in the early stages of a breach investigation, when companies prioritize containment and forensic analysis before public disclosure.

The episode lands amid a steady wave of attacks on connected medical-device makers and healthcare vendors, where patient data and clinical operations are high-value targets. IRhythm's Zio devices generate large volumes of cardiac data tied to identifiable patients, raising the stakes if protected health information was involved. Clinicians and hospital partners that rely on the platform should watch for further disclosures and any guidance on affected records.

More in Health IT

Health IT

Patient Identity Is Healthcare AI's Missing Control

Healthcare Dive argues that fragmented patient identity data is the overlooked control that determines whether clinical AI models can be trusted.

Why it matters: AI outputs are only as good as the patient records behind them, making identity resolution a prerequisite for safe clinical deployment.

Health IT

ARPA-H's $62.7M Autonomous AI Bet Raises a Liability Question

ARPA-H picked six organizations for a $62.7 million contract to build an autonomous AI agent that manages heart failure care between visits, raising unresolved questions about who is liable when it acts on its own.

Why it matters: Autonomous clinical AI moves beyond decision support to independent action, and the legal accountability for its decisions remains undefined.