Another healthcare firm attacked days after Novo Nordisk breach
2026-06-17T14:51:50Z•0303d59b2f993fc3eaff1b3139290328e9f8fb63dd422dc10cddc368b07e0573
AppSec remediationArmorCodeCorelightCyber Resilience ActKubernetes securityLegit SecurityNDRPHIRokarollaSBOMTenable OneTigera LynxWitnessAIaccessibility abuseagentic AI securityandroid malwarebanking trojancontinuous validationdata breachdevice takeoverextortionhealthcareiRhythmmalware distributionthird-party compromise
What happened
The feed covers multiple security developments: iRhythm Holdings disclosed a cyberattack (discovered June 8, 2026) involving third‑party‑hosted business applications that resulted in theft of patient protected health information (PHI), proprietary data and other personal information, with the threat actor demanding payment. Separately, Zimperium reported a new Android banking trojan dubbed Rokarolla that targets 217 banking and crypto apps, supports 137 commands, abuses Accessibility services, is distributed via fake app websites, and can enable full device takeover. The remainder of the items
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 0303d59b2f993fc3eaff1b3139290328e9f8fb63dd422dc10cddc368b07e0573
- Enrichment time
- 2026-06-17T14:51:50Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.