iRhythm Hit by Cyberattack, Patient Data Stolen and Ransom Demanded

Multiple high-impact incidents and active exploitation campaigns were reported: iRhythm disclosed a ransomware/data-theft incident exposing patient and proprietary data; Novo Nordisk confirmed clinical-trial data theft; Australian sugar producer Mackay Sugar reported a cyber incident; and UNC6508 (China-linked) conducted long-term espionage in medical research networks. Multiple vulnerabilities are being actively exploited — including CVE-2026-0257 (PAN-OS authentication/VPN bypass) and CVE-2026-20262 (Cisco Catalyst SD‑WAN arbitrary file write, added to CISA KEV) — and Fortinet FortiSandbox/3