iRhythm Holdings, Inc.

The filing is largely consistent with the prior 10-Q, with revenue mix by payor type essentially unchanged. The most notable new disclosure is a Cybersecurity Incident in June 2026 involving unauthorized access to sensitive information on third-party-hosted business applications, which resulted in investigation, remediation, and potential notification costs. Management states disclosure controls remain effective and there is no evidence of ongoing unauthorized system access, but incremental costs and insurance reimbursement uncertainty introduce a new financial and reputational risk vector.