zHealth, Inc. Data Breach Exposes Sensitive Patient Medical and Personal Data

zHealth, Inc., a company providing software solutions for chiropractic, physical therapy, and allied health practices, formally reported a data security incident to the California Attorney General on September 11, 2026. The breach, which occurred on January 20, 2026, involved an unauthorized intrusion into zHealth's network infrastructure, potentially compromising a wide array of confidential patient and personal details.

Investigations indicate that the exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Billing and Payment History, and Provider and Treatment Dates. This combination of highly sensitive information carries significant risks for affected individuals.

The exposure of such detailed medical and personal data can lead to various forms of harm, including medical identity theft, where criminals use compromised information to obtain healthcare services. It can also increase the risk of financial fraud, insurance scams, and other malicious activities targeting those whose data was compromised. Individuals should remain vigilant for unusual activity related to their healthcare or financial accounts.

As a custodian of sensitive healthcare data, zHealth, Inc. is subject to strict regulations, including the Health Insurance Portability and Accountability Act (HIPAA) and California's Confidentiality of Medical Information Act (CMIA). The occurrence of a breach of this nature suggests potential failures in safeguarding patient information, as these laws require robust security measures to prevent unauthorized access.

If you have received a data breach notification letter from zHealth, Inc., it means your personal and medical information was part of this security incident. Receiving this letter establishes your standing to seek legal recourse. You do not necessarily need to prove financial loss or identity theft to explore your legal options. Our firm offers a free, no-obligation case review to help you understand what this breach means for your legal rights and potential next steps.