Almeida Law Group is investigating a data breach at zHealth, Inc. The breach occurred on January 20th, 2026. If you were affected, contact Almeida Law Group.
About zHealth, Inc.
zHealth, Inc. is a San Francisco, California-based company (with additional offices in San Diego and India) that operates a cloud-based electronic health records (EHR) and practice management SaaS platform built for wellness providers such as chiropractors, acupuncturists, massage therapists, and physical therapists. Founded in 2015, the company offers scheduling, clinical documentation, billing, claims management, payment processing, and patient communication tools, and serves thousands of wellness practices daily. Because the platform handles clinical and administrative workflows for healthcare providers, it processes sensitive patient and practice data on behalf of its clients.
What Happened?
zHealth, Inc. was listed in a California Attorney General sample breach notice filed on September 11th, 2026. According to that notice, on or about June 15th, 2026, zHealth discovered that an unauthorized third party had copied certain information from its network environment. A forensic investigation determined that the unauthorized activity occurred between January 20th and January 21st, 2026. A comprehensive review of the potentially impacted data was completed on September 3rd, 2026. The notice does not specify which data types were involved — that section of the publicly available notice appears blank or redacted. The total number of individuals affected has not been disclosed. zHealth is offering 12 months of single-bureau credit monitoring, a single-bureau credit report, and a single-bureau credit score through Cyberscout, a TransUnion company, at no charge to affected individuals. Enrollment must be completed within 90 days of the date of the notification letter, which was dated September 11th, 2026.
Separately, dark web monitoring sources report that a threat actor using the name “Kazu” claimed responsibility for the intrusion and listed zHealthEHR on a ransomware leak site around January 26th, 2026. According to a law firm investigation page citing those dark web sources, the Kazu group claimed to have leaked 15 GB of data containing over 1.2 million records. These are unverified attacker allegations and have not been confirmed by zHealth or any regulator. The same threat actor name has been linked to other incidents, including a breach at ManageMyHealth in New Zealand in December 2025. The official breach notice does not confirm ransomware or reference the Kazu group. Law firm Shamis & Gentile P.A. has announced it is investigating the zHealth breach for a potential class action lawsuit on behalf of affected individuals; as of September 2026, no class action has been filed.
Key Facts at a Glance
- Company or Organization: zHealth, Inc.
- Industry: Healthcare IT / SaaS — Electronic Health Records and Practice Management Software for Wellness Providers
- Location: 333 1st St, Unit N705, San Francisco, CA 94105; additional offices in San Diego and India
- Incident type: Unauthorized access — data copied from network environment; ransomware group “Kazu” has claimed responsibility (unverified attacker allegation)
- Date of breach: January 20th, 2026
- Date breach discovered: June 15th, 2026
- Date of consumer notification: September 11th, 2026
- Identity theft protection offered: 12 months of single-bureau credit monitoring, credit report, and credit score via Cyberscout (a TransUnion company)
- Enrollment deadline: 90 days from September 11th, 2026
- Litigation status: Shamis & Gentile P.A. is investigating for a potential class action; no lawsuit filed as of September 2026
- Source: California Attorney General breach filing; HookPhish — Kazu ransomware claim; ClaimDepot — zHealth breach investigation; zHealth G2 Winter 2024 Leader announcement
What Should You Do?
If you received a notice from zHealth, enroll in the free 12-month credit monitoring offered through Cyberscout at the link provided in your letter — you must do so within 90 days of September 11th, 2026. Whether or not you enroll, consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion) to help prevent new accounts from being opened in your name. Review your account statements and credit reports carefully for any unfamiliar activity, and obtain free copies of your credit reports at AnnualCreditReport.com. Because zHealth processes clinical and billing records for healthcare providers, review any Explanation of Benefits statements from your insurer and check your medical records for services you did not receive. If you suspect your information has been misused, visit IdentityTheft.gov for step-by-step recovery guidance.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
