Skip to content
zHealth Data Breach Exposes Medical Records of Over 1.2 Million Patients

zHealth Data Breach Exposes Medical Records of Over 1.2 Million Patients

First seen 15 Sep 2026, 03:21 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 15, 2026 at 04:21 UTC
  • •Unauthorized access to zHealth's network exposed over 1.2 million medical records.
  • •The breach was discovered on June 15, 2026, after unauthorized activity occurred in January.
  • •Affected individuals are being notified and offered credit monitoring services.

zHealth, Inc. reported a data breach where an unauthorized third party accessed its network between January 20 and January 21, 2026. The breach was discovered on June 15, 2026, and affected over 1.2 million records including names, medical information, and health insurance details. The company began notifying affected individuals on September 3, 2026, and is offering credit monitoring and identity protection services. The threat actor, identified as Kazu, claimed to have obtained 15 GB of data and intended to publish it within 22 to 23 days. zHealth is reviewing and enhancing its security policies to prevent future incidents. The breach was reported to the California Attorney General and applicable regulators.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-01-20
Unauthorized access occurred
An unauthorized third party accessed zHealth's network environment, copying sensitive data.
Claimdepot
2026-01-26
Threat actor claims data theft
A threat actor named Kazu posted on the dark web claiming to have obtained 15 GB of data from zHealth EHR.
Claimdepot
2026-06-15
Breach discovered
zHealth became aware of the unauthorized access and initiated an investigation.
zHealth
2026-09-03
Notification of affected individuals
zHealth began notifying individuals whose information was potentially impacted by the breach.
Claimdepot
2026-09-10
Public notice posted
zHealth posted a notice of the data event on its website, informing the public about the breach.
Claimdepot

More articles in this cluster (2)

Following this threat?

Track ZHealth EHR in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 4