"Cardiac monitoring firm iRhythm detected unauthorized access to business applications on June 8. Attackers stole patient health information and demanded payment to prevent disclosure. Clinical systems and medical devices were reportedly unaffected."