Key developments
iRhythm discloses material patient data breach
BleepingComputer's Sergiu Gatlan and TechNadu's Lore Apostol reported that iRhythm Holdings disclosed in a June 15 SEC filing that hackers exfiltrated patient protected health information, other personal information, and proprietary data from third-party-hosted business applications. iRhythm said it identified unauthorized activity on June 8, received a ransom demand on June 9, and deemed the incident material on June 10 because of the volume of potentially affected data. The company attributed access to social engineering and said it has no evidence of impact to products, clinical or medical device systems, patient safety, manufacturing, distribution, or financial reporting systems.
Why it matters
The incident exposes sensitive health data at a digital cardiac-monitoring company serving more than 12 million patients, while leaving the affected population count unresolved.
Sources & driving stories
BLEEPINGCOMPUTER · Sergiu Gatlan
BleepingComputer coverageTECHNADU · Lore Apostol
TechNadu coverageSecret Service pilots mobile face-scanning app
Newsmax's Solange Reyner, citing Bloomberg, reported that the Secret Service is testing Sentry, a mobile app that lets agents scan faces or fingerprints with a smartphone and compare them against government databases using AI. The pilot involves 25 uniformed agents who mostly protect facilities such as the White House and foreign embassies, and personnel are reportedly mostly required to seek consent before scanning. Secret Service Deputy Director Matthew Quinn said threat investigations are up 40% year over year and interventions involving people believed to be experiencing mental health episodes are nearly 10 times higher.
Why it matters
A federal protective agency is moving biometric identity checks into field operations, raising unresolved questions about consent, retention, database scope, and mission creep.
Sources & driving stories
NEWSMAX · Solange Reyner
Newsmax coverageUK plans under-16 social media ban
The Record's Suzanne Smalley reported that the UK government, led by Prime Minister Keir Starmer, plans to block children under 16 from algorithmic user-to-user social media platforms including TikTok, Facebook, Instagram, Snapchat, X, and YouTube, while excluding messaging services such as WhatsApp. The plan would require “highly effective” age assurance, with the communications regulator expected to produce a design plan by October and legislation expected before Christmas. Enforcement is planned for spring 2027, and the government also plans restrictions on AI romantic companion chatbots and other intimate chatbot functionality for users under 18.
Why it matters
A national under-16 ban would force platforms into stronger age verification and child-safety controls, with direct privacy implications for identity checks and minors’ data.
Sources & driving stories
THE RECORD · Suzanne Smalley
The Record coverageWorth noting
WORTH NOTING
Meta pulls smart-glasses face code
Newstarget reported Meta removed code for an unreleased NameTag facial-recognition system from the Meta AI app after WIRED scrutiny, while PhoneArena's Mariyan Slavov noted reporting that Rank One Computing supported the work.
WORTH NOTING
ALPRs link plates to devices
WebProNews's Sara Donnelly described Leonardo's SignalTrace add-on, which correlates license plates with Bluetooth, Wi-Fi, and RFID identifiers from phones, watches, headphones, and vehicle electronics.
WORTH NOTING
Healthcare breaches top 19 million
TechTarget's Jill Hughes reported that HHS OCR breach-portal data shows more than 19 million individuals affected by healthcare data breaches reported in 2026 so far, with hacking/IT incidents still dominant.
Still unclear
OPEN QUESTION
Will consent survive field biometric use?
The Secret Service pilot reportedly relies mostly on consent, but threat-assessment settings, database breadth, and parallel DHS tools such as Mobile Fortify could pressure that limit.
OPEN QUESTION
How will age assurance avoid overcollection?
The UK under-16 social media plan depends on highly effective age checks, creating tension between child-safety enforcement and minimizing identity data collected from all users.
